CVE-2025-11412

A vulnerability has been found in GNU Binutils 2.45. This impacts the function bfd_elf_gc_record_vtentry of the file bfd/elflink.c of the component Linker. The manipulation leads to out-of-bounds read. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier of the patch is 047435dd988a3975d40c6626a8f739a0b2e154bc. To fix this issue, it is recommended to deploy a patch.

• CWE-119
• CWE-125
• CWE-125

• https://sourceware.org/bugzilla/attachment.cgi?id=16378Broken Link
• https://sourceware.org/bugzilla/show_bug.cgi?id=33452Exploit, Issue Tracking
• https://sourceware.org/bugzilla/show_bug.cgi?id=33452#c8Exploit, Issue Tracking
• https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=047435dd988a3975d40c6626a8f739a0b2e154bcPatch
• https://vuldb.com/?ctiid.327348Permissions Required, VDB Entry
• https://vuldb.com/?id.327348Third Party Advisory, VDB Entry
• https://www.gnu.org/Third Party Advisory, VDB Entry
• https://cert-portal.siemens.com/productcert/html/ssa-082556.html
• https://sourceware.org/bugzilla/show_bug.cgi?id=33452Exploit, Issue Tracking

Published

Oct 7, 2025

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-11406A security flaw has been discovered in kaifangqian kaifangqi…4.3
• CVE-2025-11407A weakness has been identified in D-Link DI-7001 MINI 24.04.…9.8
• CVE-2025-11408A security vulnerability has been detected in D-Link DI-7001…9.8
• CVE-2025-11409A vulnerability was detected in Campcodes Advanced Online Vo…8.8
• CVE-2025-11410A flaw has been found in Campcodes Advanced Online Voting Ma…8.8
• CVE-2025-11411NLnet Labs Unbound up to and including version 1.24.1 is vul…5.7
• CVE-2025-11413A vulnerability was found in GNU Binutils 2.45. Affected is …5.5
• CVE-2025-11414A vulnerability was determined in GNU Binutils 2.45. Affecte…5.5
• CVE-2025-11415A vulnerability was identified in PHPGurukul Beauty Parlour …9.8
• CVE-2025-11416A security flaw has been discovered in PHPGurukul Beauty Par…9.8
• CVE-2025-11417A weakness has been identified in Campcodes Advanced Online …8.8
• CVE-2025-11418A security vulnerability has been detected in Tenda CH22 up …9.8