CVE-2025-11082

A flaw has been found in GNU Binutils 2.45. Impacted is the function _bfd_elf_parse_eh_frame of the file bfd/elf-eh-frame.c of the component Linker. Executing manipulation can lead to heap-based buffer overflow. The attack is restricted to local execution. The exploit has been published and may be used. This patch is called ea1a0737c7692737a644af0486b71e4a392cbca8. A patch should be applied to remediate this issue. The code maintainer replied with "[f]ixed for 2.46".

• CWE-119
• CWE-122

• https://sourceware.org/bugzilla/attachment.cgi?id=16358Broken Link
• https://sourceware.org/bugzilla/show_bug.cgi?id=33464Exploit, Issue Tracking
• https://sourceware.org/bugzilla/show_bug.cgi?id=33464#c2Exploit, Issue Tracking
• https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ea1a0737c7692737a644af0486b71e4a392cbca8Patch
• https://vuldb.com/?ctiid.326123Permissions Required, VDB Entry
• https://vuldb.com/?id.326123Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.661276Third Party Advisory, VDB Entry
• https://www.gnu.org/Product
• https://cert-portal.siemens.com/productcert/html/ssa-082556.html

Published

Sep 27, 2025

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-11077A vulnerability was determined in Campcodes Online Learning …9.8
• CVE-2025-11078A vulnerability was identified in itsourcecode Open Source J…8.8
• CVE-2025-11079A security flaw has been discovered in Campcodes Farm Manage…9.8
• CVE-2025-1108Insufficient data authenticity verification vulnerability in…8.6
• CVE-2025-11080A security vulnerability has been detected in zhuimengshaoni…4.3
• CVE-2025-11081A vulnerability was detected in GNU Binutils 2.45. This issu…5.5
• CVE-2025-11083A vulnerability has been found in GNU Binutils 2.45. The aff…7.8
• CVE-2025-11084A security issue exists within DataMosaix™ Private Cloud, al…7.6
• CVE-2025-11085A security issue exists within DataMosaix™ Private Cloud all…8.6
• CVE-2025-11086The Academy LMS – WordPress LMS Plugin for Complete eLearnin…8.1
• CVE-2025-11087The Zegen Core plugin for WordPress is vulnerable to Cross-S…8.8
• CVE-2025-11088A weakness has been identified in itsourcecode Open Source J…8.8