CVE-2025-11081

A vulnerability was detected in GNU Binutils 2.45. This issue affects the function dump_dwarf_section of the file binutils/objdump.c. Performing manipulation results in out-of-bounds read. The attack is only possible with local access. The exploit is now public and may be used. The patch is named f87a66db645caf8cc0e6fc87b0c28c78a38af59b. It is suggested to install a patch to address this issue.

• CWE-119
• CWE-125

• https://github.com/user-attachments/files/20623354/hdf5_crash_3.txtBroken Link
• https://sourceware.org/bugzilla/show_bug.cgi?id=33406Exploit, Issue Tracking
• https://sourceware.org/bugzilla/show_bug.cgi?id=33406#c2Exploit, Issue Tracking
• https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=f87a66db645caf8cc0e6fc87b0c28c78a38af59bPatch
• https://vuldb.com/?ctiid.326122Permissions Required, VDB Entry
• https://vuldb.com/?id.326122Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.661275Third Party Advisory, VDB Entry
• https://www.gnu.org/Product

Published

Sep 27, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-11076A vulnerability was found in Campcodes Online Learning Manag…9.8
• CVE-2025-11077A vulnerability was determined in Campcodes Online Learning …9.8
• CVE-2025-11078A vulnerability was identified in itsourcecode Open Source J…8.8
• CVE-2025-11079A security flaw has been discovered in Campcodes Farm Manage…9.8
• CVE-2025-1108Insufficient data authenticity verification vulnerability in…8.6
• CVE-2025-11080A security vulnerability has been detected in zhuimengshaoni…4.3
• CVE-2025-11082A flaw has been found in GNU Binutils 2.45. Impacted is the …7.8
• CVE-2025-11083A vulnerability has been found in GNU Binutils 2.45. The aff…7.8
• CVE-2025-11084A security issue exists within DataMosaix™ Private Cloud, al…7.6
• CVE-2025-11085A security issue exists within DataMosaix™ Private Cloud all…8.6
• CVE-2025-11086The Academy LMS – WordPress LMS Plugin for Complete eLearnin…8.1
• CVE-2025-11087The Zegen Core plugin for WordPress is vulnerable to Cross-S…8.8