{"id":"CVE-2025-11081","aliases":["BELL-CVE-2025-11081","DEBIAN-CVE-2025-11081","EUVD-2025-31443","GHSA-q5cj-48g5-f774","RHSA-2026:7098","ROOT-OS-DEBIAN-12-CVE-2025-11081","UBUNTU-CVE-2025-11081","USN-7919-1"],"status":"published","title":"GNU Binutils objdump.c dump_dwarf_section out-of-bounds","description":"A vulnerability was detected in GNU Binutils 2.45. This issue affects the function dump_dwarf_section of the file binutils/objdump.c. Performing manipulation results in out-of-bounds read. The attack is only possible with local access. The exploit is now public and may be used. The patch is named f87a66db645caf8cc0e6fc87b0c28c78a38af59b. It is suggested to install a patch to address this issue.","severity":{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00208,"percentile":0.11012,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119","CWE-125"],"published":"2025-09-27T22:02:08Z","modified":"2026-10-28T02:30:49Z","fixes":[{"ecosystem":"Alpaquita:25","package":"binutils","fixed_in":["2.45-r3"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"binutils","fixed_in":["2.45.1-r1"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"binutils","fixed_in":["2.45-r3"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"binutils","fixed_in":["2.45.1-r1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"binutils","fixed_in":["2.46-1"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"binutils","fixed_in":["2.40-2.root.io.16","2.40-2.root.io.17","2.40-2.root.io.18","2.40-2.root.io.19","2.40-2.root.io.20","2.40-2.root.io.21","2.40-2.root.io.22","2.40-2.root.io.23","2.40-2.root.io.24","2.40-2.aikido.25"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"rootio-binutils","fixed_in":["2.40-2.root.io.16","2.40-2.root.io.17","2.40-2.root.io.18","2.40-2.root.io.19","2.40-2.root.io.20","2.40-2.root.io.21","2.40-2.root.io.22","2.40-2.root.io.23","2.40-2.root.io.24","2.40-2.aikido.25"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"binutils","fixed_in":["2.45-7ubuntu1.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"binutils","fixed_in":["2.24-5ubuntu14.2+esm8"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"binutils","fixed_in":["2.26.1-1ubuntu1~16.04.8+esm14"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"binutils","fixed_in":["2.30-21ubuntu1~18.04.9+esm13"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"binutils","fixed_in":["2.34-6ubuntu1.11+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"binutils","fixed_in":["2.38-4ubuntu2.12"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"binutils","fixed_in":["2.42-4ubuntu2.8"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpaquita:25","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.45-r0"},{"fixed":"2.45-r3"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.45-r0"},{"fixed":"2.45.1-r1"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.45-r0"},{"fixed":"2.45-r3"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.45-r0"},{"fixed":"2.45.1-r1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.40-2","2.40.50.20230111-1","2.40.50.20230215-1","2.40.50.20230501-1","2.40.50.20230510-1","2.40.50.20230602-1","2.40.50.20230611-1","2.40.50.20230611-2","2.40.50.20230622-1","2.40.50.20230625-1","2.40.50.20230630-1","2.40.90.20230705-1","2.40.90.20230714-1","2.40.90.20230714-2","2.40.90.20230720-1","2.40.90.20230729-1","2.40.90.20230729-2","2.41-1","2.41-2","2.41-3","2.41-4","2.41-5","2.41-6","2.41-7","2.41.50.20230731-1","2.41.50.20230803-1","2.41.50.20230905-1","2.41.50.20231010-1","2.41.50.20231101-1","2.41.50.20231125-1","2.41.50.20231202-1","2.41.50.20231206-1","2.41.50.20231214-1","2.41.50.20231227-1","2.41.90.20240115-1","2.41.90.20240122-1","2.42-1","2.42-2","2.42-2+hurd.1","2.42-3","2.42-4","2.42.50.20240614-1","2.42.50.20240618-1","2.42.50.20240625-1","2.42.50.20240710-1","2.42.90.20240720-1","2.42.90.20240720-2","2.43-1","2.43-2","2.43.1-1","2.43.1-2","2.43.1-3","2.43.1-4","2.43.1-5","2.43.50.20240817-1","2.43.50.20240909-1","2.43.50.20241004-1","2.43.50.20241112-1","2.43.50.20241126-1","2.43.50.20241126-2","2.43.50.20241126-3","2.43.50.20241204-1","2.43.50.20241204-2","2.43.50.20241210-1","2.43.50.20241215-1","2.43.50.20241221-1","2.43.50.20241230-1","2.43.50.20250108-1","2.43.90.20250122-1","2.43.90.20250122-2","2.43.90.20250127-1","2.43.90.20250202-1","2.44-1","2.44-2","2.44-3","2.44.50.20250201-1","2.44.50.20250207-1","2.44.50.20250218-1","2.44.50.20250218-2","2.44.50.20250309-1","2.44.50.20250405-1","2.44.50.20250502-1","2.44.50.20250520-1","2.44.50.20250528-1","2.44.50.20250707-1","2.44.90.20250719-1","2.45-1","2.45-2","2.45-3","2.45-4","2.45-5","2.45-6","2.45-7","2.45-8","2.45.50.20250813-1","2.45.50.20250903-1","2.45.50.20251005-1","2.45.50.20251023-1","2.45.50.20251023-2","2.45.50.20251122-1","2.45.50.20251125-1","2.45.50.20251201-1","2.45.50.20251209-1","2.45.50.20260116-1","2.45.50.20260119-1","2.45.90.20260125-1","2.45.90.20260201-1","2.46-1","2.46-2","2.46-3","2.46.50.20260216-1","2.46.50.20260509-1","2.46.50.20260519-1","2.46.50.20260608-1","2.46.50.20260617-1","2.46.90.20260712-1","2.47-1","2.47-2","2.47-3","2.47-4","2.47-5","2.47-6","2.47.50.20260813-1","2.47.50.20260813-2","2.47.50.20260813-3","2.47.50.20260901-1","2.47.50.20261004-1"]},{"source":"osv","ecosystem":"Debian:13","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.44-3","2.44.50.20250201-1","2.44.50.20250207-1","2.44.50.20250218-1","2.44.50.20250218-2","2.44.50.20250309-1","2.44.50.20250405-1","2.44.50.20250502-1","2.44.50.20250520-1","2.44.50.20250528-1","2.44.50.20250707-1","2.44.90.20250719-1","2.45-1","2.45-2","2.45-3","2.45-4","2.45-5","2.45-6","2.45-7","2.45-8","2.45.50.20250813-1","2.45.50.20250903-1","2.45.50.20251005-1","2.45.50.20251023-1","2.45.50.20251023-2","2.45.50.20251122-1","2.45.50.20251125-1","2.45.50.20251201-1","2.45.50.20251209-1","2.45.50.20260116-1","2.45.50.20260119-1","2.45.90.20260125-1","2.45.90.20260201-1","2.46-1","2.46-2","2.46-3","2.46.50.20260216-1","2.46.50.20260509-1","2.46.50.20260519-1","2.46.50.20260608-1","2.46.50.20260617-1","2.46.90.20260712-1","2.47-1","2.47-2","2.47-3","2.47-4","2.47-5","2.47-6","2.47.50.20260813-1","2.47.50.20260813-2","2.47.50.20260813-3","2.47.50.20260901-1","2.47.50.20261004-1"]},{"source":"osv","ecosystem":"Debian:14","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.46-1"}]}],"versions":["2.44-3","2.44.50.20250201-1","2.44.50.20250207-1","2.44.50.20250218-1","2.44.50.20250218-2","2.44.50.20250309-1","2.44.50.20250405-1","2.44.50.20250502-1","2.44.50.20250520-1","2.44.50.20250528-1","2.44.50.20250707-1","2.44.90.20250719-1","2.45-1","2.45-2","2.45-3","2.45-4","2.45-5","2.45-6","2.45-7","2.45-8","2.45.50.20250813-1","2.45.50.20250903-1","2.45.50.20251005-1","2.45.50.20251023-1","2.45.50.20251023-2","2.45.50.20251122-1","2.45.50.20251125-1","2.45.50.20251201-1","2.45.50.20251209-1","2.45.50.20260116-1","2.45.50.20260119-1","2.45.90.20260125-1","2.45.90.20260201-1"]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.45.1-5.hum1"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"binutils-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.45.1-5.hum1"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"binutils-gold","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.45.1-5.hum1"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"binutils-gprofng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.45.1-5.hum1"}]}],"bundled":25},{"source":"osv","ecosystem":"Root:Debian:12","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.40-2.root.io.16"},{"fixed":"2.40-2.root.io.17"},{"fixed":"2.40-2.root.io.18"},{"fixed":"2.40-2.root.io.19"},{"fixed":"2.40-2.root.io.20"},{"fixed":"2.40-2.root.io.21"},{"fixed":"2.40-2.root.io.22"},{"fixed":"2.40-2.root.io.23"},{"fixed":"2.40-2.root.io.24"},{"fixed":"2.40-2.aikido.25"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"rootio-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.40-2.root.io.16"},{"fixed":"2.40-2.root.io.17"},{"fixed":"2.40-2.root.io.18"},{"fixed":"2.40-2.root.io.19"},{"fixed":"2.40-2.root.io.20"},{"fixed":"2.40-2.root.io.21"},{"fixed":"2.40-2.root.io.22"},{"fixed":"2.40-2.root.io.23"},{"fixed":"2.40-2.root.io.24"},{"fixed":"2.40-2.aikido.25"}]}]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-7ubuntu1.2"}]}],"versions":["2.44-3ubuntu1","2.44.50.20250602-0ubuntu1","2.44.50.20250604-0ubuntu2","2.44.50.20250616-0ubuntu1","2.44.50.20250707-1ubuntu1","2.45-1ubuntu1","2.45-3ubuntu3","2.45-6ubuntu1","2.45-7ubuntu1","2.45-7ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24-5ubuntu14.2+esm8"}]}],"versions":["2.23.52.20130913-0ubuntu1","2.23.90.20131017-1ubuntu1","2.23.90.20131116-1ubuntu1","2.23.91.20131123-1ubuntu1","2.24-1ubuntu1","2.24-1ubuntu2","2.24-2ubuntu1","2.24-2ubuntu2","2.24-2ubuntu3","2.24-4ubuntu1","2.24-5ubuntu1","2.24-5ubuntu2","2.24-5ubuntu3","2.24-5ubuntu3.1","2.24-5ubuntu13","2.24-5ubuntu14","2.24-5ubuntu14.1","2.24-5ubuntu14.2","2.24-5ubuntu14.2+esm1","2.24-5ubuntu14.2+esm2","2.24-5ubuntu14.2+esm3","2.24-5ubuntu14.2+esm5","2.24-5ubuntu14.2+esm6","2.24-5ubuntu14.2+esm7"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.8+esm14"}]}],"versions":["2.25.1-6ubuntu1","2.25.51.20151022-0ubuntu2","2.25.51.20151022-0ubuntu3","2.25.51.20151027-0ubuntu1","2.25.51.20151028-0ubuntu1","2.25.51.20151106-0ubuntu1","2.25.51.20151113-1ubuntu1","2.25.51.20151113-2ubuntu1","2.25.90.20151125-1ubuntu1","2.25.90.20151125-2ubuntu1","2.25.90.20151211-0ubuntu1","2.25.90.20151211-0ubuntu2","2.25.90.20160101-1ubuntu1","2.25.90.20160101-1ubuntu2","2.26-2ubuntu1","2.26-3ubuntu1","2.26-4ubuntu1","2.26-5ubuntu1","2.26-6ubuntu1","2.26-7ubuntu2","2.26-8ubuntu1","2.26-8ubuntu2","2.26-8ubuntu2.1","2.26.1-1ubuntu1~16.04","2.26.1-1ubuntu1~16.04.1","2.26.1-1ubuntu1~16.04.3","2.26.1-1ubuntu1~16.04.4","2.26.1-1ubuntu1~16.04.5","2.26.1-1ubuntu1~16.04.6","2.26.1-1ubuntu1~16.04.7","2.26.1-1ubuntu1~16.04.8","2.26.1-1ubuntu1~16.04.8+esm1","2.26.1-1ubuntu1~16.04.8+esm3","2.26.1-1ubuntu1~16.04.8+esm4","2.26.1-1ubuntu1~16.04.8+esm5","2.26.1-1ubuntu1~16.04.8+esm6","2.26.1-1ubuntu1~16.04.8+esm7","2.26.1-1ubuntu1~16.04.8+esm9","2.26.1-1ubuntu1~16.04.8+esm11","2.26.1-1ubuntu1~16.04.8+esm12","2.26.1-1ubuntu1~16.04.8+esm13"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.9+esm13"}]}],"versions":["2.29.1-4ubuntu1","2.29.1-6ubuntu1","2.29.1-7ubuntu1","2.29.1-8ubuntu1","2.29.1-10ubuntu1","2.29.1-12ubuntu1","2.30-4ubuntu1","2.30-5ubuntu1","2.30-7ubuntu1","2.30-8ubuntu1","2.30-9ubuntu1","2.30-10ubuntu1","2.30-11ubuntu1","2.30-14ubuntu2","2.30-15ubuntu1","2.30-20ubuntu2~18.04","2.30-21ubuntu1~18.04","2.30-21ubuntu1~18.04.1","2.30-21ubuntu1~18.04.2","2.30-21ubuntu1~18.04.3","2.30-21ubuntu1~18.04.4","2.30-21ubuntu1~18.04.5","2.30-21ubuntu1~18.04.7","2.30-21ubuntu1~18.04.8","2.30-21ubuntu1~18.04.9","2.30-21ubuntu1~18.04.9+esm1","2.30-21ubuntu1~18.04.9+esm3","2.30-21ubuntu1~18.04.9+esm4","2.30-21ubuntu1~18.04.9+esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+esm2"}]}],"versions":["2.33-2ubuntu1","2.33.1-1ubuntu1","2.33.1-5ubuntu1","2.33.1-6ubuntu1","2.33.1-6ubuntu3","2.33.90.20200122-1ubuntu2","2.34-1ubuntu1","2.34-3ubuntu1","2.34-4ubuntu1","2.34-5ubuntu1","2.34-6ubuntu1","2.34-6ubuntu1.1","2.34-6ubuntu1.3","2.34-6ubuntu1.4","2.34-6ubuntu1.5","2.34-6ubuntu1.6","2.34-6ubuntu1.7","2.34-6ubuntu1.8","2.34-6ubuntu1.9","2.34-6ubuntu1.10","2.34-6ubuntu1.11","2.34-6ubuntu1.11+esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.38-4ubuntu2.12"}]}],"versions":["2.37-7ubuntu1","2.37-9ubuntu1","2.37-10ubuntu1","2.37.50.20220106-2ubuntu1","2.37.90.20220126-0ubuntu1","2.37.90.20220130-0ubuntu2","2.38-1ubuntu1","2.38-2ubuntu1","2.38-3ubuntu1","2.38-4ubuntu2","2.38-4ubuntu2.1","2.38-4ubuntu2.2","2.38-4ubuntu2.3","2.38-4ubuntu2.4","2.38-4ubuntu2.5","2.38-4ubuntu2.6","2.38-4ubuntu2.7","2.38-4ubuntu2.8","2.38-4ubuntu2.10","2.38-4ubuntu2.11"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42-4ubuntu2.8"}]}],"versions":["2.41-5ubuntu1","2.41-6ubuntu1","2.41.50.20231206-1ubuntu1","2.41.50.20231214-1ubuntu1","2.41.50.20231227-1ubuntu1","2.41.90.20240122-1ubuntu1","2.42-2ubuntu1","2.42-3ubuntu1","2.42-4ubuntu1","2.42-4ubuntu2","2.42-4ubuntu2.3","2.42-4ubuntu2.4","2.42-4ubuntu2.5","2.42-4ubuntu2.6","2.42-4ubuntu2.7"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-7ubuntu1.2"}]}],"versions":["2.44-3ubuntu1","2.44.50.20250602-0ubuntu1","2.44.50.20250604-0ubuntu2","2.44.50.20250616-0ubuntu1","2.44.50.20250707-1ubuntu1","2.45-1ubuntu1","2.45-3ubuntu3","2.45-6ubuntu1","2.45-7ubuntu1","2.45-7ubuntu1.1"]}],"products":[{"vendor":"gnu","product":"binutils"}],"references":[{"url":"https://vuldb.com/?id.326122","tags":["vdb-entry","technical-description","Third Party Advisory","VDB Entry","advisory","article","report"]},{"url":"https://vuldb.com/?ctiid.326122","tags":["signature","permissions-required","Permissions Required","VDB Entry","report","article"]},{"url":"https://vuldb.com/?submit.661275","tags":["third-party-advisory","Third Party Advisory","VDB Entry","advisory","article","report"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33406","tags":["issue-tracking","Exploit","Issue Tracking","report","article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33406#c2","tags":["issue-tracking","Exploit","Issue Tracking","report","article"]},{"url":"https://github.com/user-attachments/files/20623354/hdf5_crash_3.txt","tags":["exploit","Broken Link","evidence","article","report"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=f87a66db645caf8cc0e6fc87b0c28c78a38af59b","tags":["patch","Patch","fix","article","report"]},{"url":"https://www.gnu.org/","tags":["product","Product","web","article","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11081","tags":["advisory"]},{"url":"https://www.gnu.org"},{"url":"https://github.com/advisories/GHSA-q5cj-48g5-f774"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2025-11081","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/11xxx/CVE-2025-11081.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-11081","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:7098","tags":["advisory"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-69645","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-11083","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-11082","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-11081","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-11840","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-11839","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-11495","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-11494","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-11414","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-11413","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-11412","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-66866","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-66864","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-66862","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-66863","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-66861","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-66865","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-69648","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-69647","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-69646","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-69650","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-69652","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-69651","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-69649","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-69644","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7098.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2399944","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-11081","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2399943","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-11082","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11082","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/attachment.cgi?id=16358","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33464","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33464#c2","tags":["article"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ea1a0737c7692737a644af0486b71e4a392cbca8","tags":["article"]},{"url":"https://vuldb.com/?ctiid.326123","tags":["article"]},{"url":"https://vuldb.com/?id.326123","tags":["article"]},{"url":"https://vuldb.com/?submit.661276","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2399948","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-11083","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11083","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/attachment.cgi?id=16353","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33457","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33457#c1","tags":["article"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=9ca499644a21ceb3f946d1c179c38a83be084490","tags":["article"]},{"url":"https://vuldb.com/?ctiid.326124","tags":["article"]},{"url":"https://vuldb.com/?id.326124","tags":["article"]},{"url":"https://vuldb.com/?submit.661277","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2402425","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-11412","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11412","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33452","tags":["article"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=047435dd988a3975d40c6626a8f739a0b2e154bc","tags":["article"]},{"url":"https://vuldb.com/?id.327348","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2402423","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-11413","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11413","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33456","tags":["article"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=72efdf166aa0ed72ecc69fc2349af6591a7a19c0","tags":["article"]},{"url":"https://vuldb.com/?id.327349","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2402424","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-11414","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11414","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33450","tags":["article"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=aeaaa9af6359c8e394ce9cf24911fec4f4d23703","tags":["article"]},{"url":"https://vuldb.com/?id.327350","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2402559","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-11494","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11494","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/attachment.cgi?id=16389","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33499","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33499#c2","tags":["article"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=b6ac5a8a5b82f0ae6a4642c8d7149b325f4cc60a","tags":["article"]},{"url":"https://vuldb.com/?ctiid.327619","tags":["article"]},{"url":"https://vuldb.com/?id.327619","tags":["article"]},{"url":"https://vuldb.com/?submit.668281","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2402584","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-11495","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11495","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/attachment.cgi?id=16393","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33502","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33502#c3","tags":["article"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=6b21c8b2ecfef5c95142cbc2c32f185cb1c26ab0","tags":["article"]},{"url":"https://vuldb.com/?ctiid.327620","tags":["article"]},{"url":"https://vuldb.com/?id.327620","tags":["article"]},{"url":"https://vuldb.com/?submit.668290","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2404439","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-11839","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11839","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/attachment.cgi?id=16344","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33448","tags":["article"]},{"url":"https://vuldb.com/?ctiid.328774","tags":["article"]},{"url":"https://vuldb.com/?id.328774","tags":["article"]},{"url":"https://vuldb.com/?submit.661279","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2404481","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-11840","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11840","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/attachment.cgi?id=16351","tags":["article"]},{"url":"https://sourceware.org/bugzilla/attachment.cgi?id=16357","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33455","tags":["article"]},{"url":"https://vuldb.com/?ctiid.328775","tags":["article"]},{"url":"https://vuldb.com/?id.328775","tags":["article"]},{"url":"https://vuldb.com/?submit.661281","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2425823","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-66861","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66861","tags":["advisory"]},{"url":"https://github.com/caozhzh/CRGF-Vul/blob/main/cxxfilt/crash1.md","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2425825","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-66862","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66862","tags":["advisory"]},{"url":"https://github.com/caozhzh/CRGF-Vul/blob/main/cxxfilt/crash3.md","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2425824","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-66863","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66863","tags":["advisory"]},{"url":"https://github.com/caozhzh/CRGF-Vul/blob/main/cxxfilt/crash2.md","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2425827","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-66864","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66864","tags":["advisory"]},{"url":"https://github.com/caozhzh/CRGF-Vul/blob/main/cxxfilt/crash5.md","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2425822","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-66865","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66865","tags":["advisory"]},{"url":"https://github.com/caozhzh/CRGF-Vul/blob/main/cxxfilt/crash4.md","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2425830","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-66866","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66866","tags":["advisory"]},{"url":"https://github.com/caozhzh/CRGF-Vul/blob/main/cxxfilt/crash6.md","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2445263","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-69644","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-69644","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33639","tags":["article"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=455446bbdc8675f34808187de2bbad4682016ff7","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2445261","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-69645","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-69645","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33637","tags":["article"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=cdb728d4da6184631989b192f1022c219dea7677","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2445264","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-69646","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-69646","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33638","tags":["article"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=598704a00cbac5e85c2bedd363357b5bf6fcee33","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2445773","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-69647","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-69647","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33640","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2445774","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-69648","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-69648","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33641","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2445298","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-69649","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-69649","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33697","tags":["article"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=66a3492ce68e1ae45b2489bd9a815c39ea5d7f66","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2445293","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-69650","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-69650","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33698","tags":["article"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ea4bc025abdba85a90e26e13f551c16a44bfa921","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2445299","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-69651","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-69651","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33700","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2445296","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-69652","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-69652","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33701","tags":["article"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=44b79abd0fa12e7947252eb4c6e5d16ed6033e01","tags":["article"]},{"url":"https://ubuntu.com/security/CVE-2025-11081","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7919-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-11082","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-11083","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-11412","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-11413","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-11414","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-11494","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-11495","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2025-11081","title":"GNU Binutils objdump.c dump_dwarf_section out-of-bounds","description":"A vulnerability was detected in GNU Binutils 2.45. This issue affects the function dump_dwarf_section of the file binutils/objdump.c. Performing manipulation results in out-of-bounds read. The attack is only possible with local access. The exploit is now public and may be used. The patch is named f87a66db645caf8cc0e6fc87b0c28c78a38af59b. It is suggested to install a patch to address this issue.","status":"published","published":"2025-09-27T22:02:08.438Z","modified":"2025-09-29T19:36:47.171Z","cvss":[{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P","level":"medium","assessor":"cna"},{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C","level":"low","assessor":"cna"},{"version":"3.0","score":3.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C","level":"low","assessor":"cna"},{"version":"2.0","score":1.7,"vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P/E:POC/RL:OF/RC:C","assessor":"cna"}],"cwes":["CWE-125","CWE-119"],"updated_at":"2026-11-02T14:32:51.199669Z"}],"euvd":[{"id":"EUVD-2025-31443","description":"A vulnerability was detected in GNU Binutils 2.45. This issue affects the function dump_dwarf_section of the file binutils/objdump.c. Performing manipulation results in out-of-bounds read. The attack is only possible with local access. The exploit is now public and may be used. The patch is named f87a66db645caf8cc0e6fc87b0c28c78a38af59b. It is suggested to install a patch to address this issue.","status":"published","published":"2025-09-27T22:02:08Z","modified":"2025-09-29T19:36:47Z","cvss":[{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P","level":"medium"}],"updated_at":"2026-11-02T20:31:38.096877Z"}],"ghsa":[{"id":"GHSA-q5cj-48g5-f774","title":"A vulnerability was detected in GNU Binutils 2.45. This issue affects the function...","description":"A vulnerability was detected in GNU Binutils 2.45. This issue affects the function dump_dwarf_section of the file binutils/objdump.c. Performing manipulation results in out-of-bounds read. The attack is only possible with local access. The exploit is now public and may be used. The patch is named f87a66db645caf8cc0e6fc87b0c28c78a38af59b. It is suggested to install a patch to address this issue.","status":"published","published":"2025-09-28T00:30:14Z","modified":"2025-09-28T00:30:15Z","cvss":[{"version":"4.0","score":1.9,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"low"},{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T15:03:48.046839Z"}],"nvd":[{"id":"CVE-2025-11081","description":"A vulnerability was detected in GNU Binutils 2.45. This issue affects the function dump_dwarf_section of the file binutils/objdump.c. Performing manipulation results in out-of-bounds read. The attack is only possible with local access. The exploit is now public and may be used. The patch is named f87a66db645caf8cc0e6fc87b0c28c78a38af59b. It is suggested to install a patch to address this issue.","status":"published","published":"2025-09-27T22:15:32.43Z","modified":"2026-10-09T10:10:00.193Z","cvss":[{"version":"4.0","score":1.9,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"low","assessor":"secondary"},{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"secondary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":1.7,"vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","level":"low","assessor":"secondary"}],"cwes":["CWE-119","CWE-125"],"updated_at":"2026-11-02T14:11:33.36253Z"}],"osv":[{"id":"BELL-CVE-2025-11081","status":"published","published":"2025-09-30T06:05:55.802242Z","modified":"2026-01-26T09:41:21.029026Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:21.227396Z"},{"id":"CVE-2025-11081","title":"GNU Binutils objdump.c dump_dwarf_section out-of-bounds","description":"A vulnerability was detected in GNU Binutils 2.45. This issue affects the function dump_dwarf_section of the file binutils/objdump.c. Performing manipulation results in out-of-bounds read. The attack is only possible with local access. The exploit is now public and may be used. The patch is named f87a66db645caf8cc0e6fc87b0c28c78a38af59b. It is suggested to install a patch to address this issue.","status":"published","published":"2025-09-27T22:02:08.438Z","modified":"2026-10-28T02:30:49.43221374Z","cvss":[{"version":"4.0","score":1.9,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P","level":"low"}],"cwes":["CWE-119","CWE-125"],"updated_at":"2026-11-02T15:44:46.024537Z"},{"id":"DEBIAN-CVE-2025-11081","description":"A vulnerability was detected in GNU Binutils 2.45. This issue affects the function dump_dwarf_section of the file binutils/objdump.c. Performing manipulation results in out-of-bounds read. The attack is only possible with local access. The exploit is now public and may be used. The patch is named f87a66db645caf8cc0e6fc87b0c28c78a38af59b. It is suggested to install a patch to address this issue.","status":"published","published":"2025-09-27T22:15:32.43Z","modified":"2026-10-10T10:00:07.74883235Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:45.102284Z"},{"id":"RHSA-2026:7098","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-04-18T10:06:19Z","modified":"2026-10-15T10:25:31Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2025-11081","title":"CVE-2025-11081 in binutils - Patched by Root","description":"Root has patched CVE-2025-11081 in the binutils package for Root:Debian:12. Multiple fixed versions available.","status":"published","published":"2026-08-25T10:13:46Z","modified":"2026-08-26T01:10:18.80438397Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:30.983521Z"},{"id":"UBUNTU-CVE-2025-11081","description":"A vulnerability was detected in GNU Binutils 2.45. This issue affects the function dump_dwarf_section of the file binutils/objdump.c. Performing manipulation results in out-of-bounds read. The attack is only possible with local access. The exploit is now public and may be used. The patch is named f87a66db645caf8cc0e6fc87b0c28c78a38af59b. It is suggested to install a patch to address this issue.","status":"published","published":"2025-09-27T22:15:00Z","modified":"2026-04-22T15:29:36.099166Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"},{"version":"4.0","score":1.9,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P","level":"low"}],"updated_at":"2026-11-02T16:55:20.144818Z"},{"id":"USN-7919-1","title":"binutils vulnerabilities","description":"It was discovered that GNU binutils' dump_dwarf_section function could be\nmanipulated to perform an out-of-bounds read. A local attacker could\npossibly use this issue to cause GNU binutils to crash, resulting in a\ndenial of service. This issue only affected Ubuntu 25.10. (CVE-2025-11081)\n\nIt was discovered that GNU binutils incorrectly handled certain files. A\nlocal attacker could possibly use this issue to cause a crash or execute\narbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04\nLTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 25.10.\n(CVE-2025-11082)\n\nIt was discovered that GNU binutils incorrectly handled certain inputs. A\nlocal attacker could possibly use this issue to cause a crash or execute\narbitrary code. This issue was only fixed in Ubuntu 25.10.\n(CVE-2025-11083)\n\nIt was discovered that certain GNU binutils functions could be manipulated\nto perform out-of-bounds reads. A local attacker could possibly use this\nissue to cause GNU binutils to crash, resulting in a denial of service.\n(CVE-2025-11412, CVE-2025-11413, CVE-2025-11414)\n\nIt was discovered that GNU binutils' _bfd_x86_elf_late_size_sections\nfunction could be manipulated to perform an out-of-bounds read. A local\nattacker could possibly use this issue to cause GNU binutils to crash,\nresulting in a denial of service. This issue only affected Ubuntu 18.04\nLTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 25.04,\nand Ubuntu 25.10. (CVE-2025-11494)\n\nIt was discovered that GNU binutils' elf_x86_64_relocate_section function\ncould be manipulated to cause a heap-based buffer overflow. A local\nattacker could possibly use this issue to cause GNU binutils to crash,\nresulting in a denial of service. This issue was only fixed in Ubuntu\n25.04 and Ubuntu 25.10. (CVE-2025-11495)","status":"published","published":"2025-12-10T14:31:33Z","modified":"2026-06-25T13:32:31.810293957Z","updated_at":"2026-11-02T16:58:21.91885Z"}]}}