CVE-2025-11414

A vulnerability was determined in GNU Binutils 2.45. Affected by this vulnerability is the function get_link_hash_entry of the file bfd/elflink.c of the component Linker. This manipulation causes out-of-bounds read. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Upgrading to version 2.46 addresses this issue. Patch name: aeaaa9af6359c8e394ce9cf24911fec4f4d23703. It is advisable to upgrade the affected component.

• CWE-119
• CWE-125
• CWE-125

• https://sourceware.org/bugzilla/attachment.cgi?id=16361Broken Link
• https://sourceware.org/bugzilla/show_bug.cgi?id=33450Exploit, Issue Tracking
• https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=aeaaa9af6359c8e394ce9cf24911fec4f4d23703Exploit, Issue Tracking
• https://vuldb.com/?ctiid.327350Permissions Required, VDB Entry
• https://vuldb.com/?id.327350Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.665591Third Party Advisory, VDB Entry
• https://www.gnu.org/Product
• https://cert-portal.siemens.com/productcert/html/ssa-082556.html
• https://sourceware.org/bugzilla/show_bug.cgi?id=33450Exploit, Issue Tracking

Published

Oct 7, 2025

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-11408A security vulnerability has been detected in D-Link DI-7001…9.8
• CVE-2025-11409A vulnerability was detected in Campcodes Advanced Online Vo…8.8
• CVE-2025-11410A flaw has been found in Campcodes Advanced Online Voting Ma…8.8
• CVE-2025-11411NLnet Labs Unbound up to and including version 1.24.1 is vul…5.7
• CVE-2025-11412A vulnerability has been found in GNU Binutils 2.45. This im…5.5
• CVE-2025-11413A vulnerability was found in GNU Binutils 2.45. Affected is …5.5
• CVE-2025-11415A vulnerability was identified in PHPGurukul Beauty Parlour …9.8
• CVE-2025-11416A security flaw has been discovered in PHPGurukul Beauty Par…9.8
• CVE-2025-11417A weakness has been identified in Campcodes Advanced Online …8.8
• CVE-2025-11418A security vulnerability has been detected in Tenda CH22 up …9.8
• CVE-2025-11419A flaw was found in Keycloak. This vulnerability allows an u…7.5
• CVE-2025-1142IBM Edge Application Manager 4.5 is vulnerable to server-sid…5.4