{"id":"CVE-2025-11840","aliases":["BELL-CVE-2025-11840","CLSA-2025-1765289777","CLSA-2025-1765478108","CLSA-2025-1766412859","CLSA-2026-1775726631","CLSA-2026-1777949670","CLSA-2026-1786357058","DEBIAN-CVE-2025-11840","EUVD-2025-34771","GHSA-jp92-pqpq-f69p","OESA-2025-2624","OESA-2025-2625","OESA-2025-2626","OESA-2025-2627","OESA-2025-2628","OESA-2025-2629","RHSA-2026:7098","ROOT-OS-DEBIAN-12-CVE-2025-11840","UBUNTU-CVE-2025-11840","USN-7899-1","openSUSE-SU-2026:11932-1"],"status":"published","title":"GNU Binutils ldmisc.c vfinfo out-of-bounds","description":"A weakness has been identified in GNU Binutils 2.45. The affected element is the function vfinfo of the file ldmisc.c. Executing a manipulation can lead to out-of-bounds read. The attack can only be executed locally. The exploit has been made available to the public and could be used for attacks. This patch is called 16357. It is best practice to apply a patch to resolve this issue.","severity":{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00282,"percentile":0.20998,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119","CWE-125"],"published":"2025-10-16T15:32:11Z","modified":"2026-10-28T02:30:42Z","fixes":[{"ecosystem":"Alpaquita:23","package":"binutils","fixed_in":["2.40-r10"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"binutils","fixed_in":["2.45-r2"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"binutils","fixed_in":["2.45-r2"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"binutils","fixed_in":["2.40-r10"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"binutils","fixed_in":["2.45-r2"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"binutils","fixed_in":["2.45-r2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils","fixed_in":["2.34-6ubuntu1.11+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-aarch64-linux-gnu","fixed_in":["2.34-6ubuntu1.11+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-alpha-linux-gnu","fixed_in":["2.34-6ubuntu1.11+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-arm-linux-gnueabi","fixed_in":["2.34-6ubuntu1.11+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-arm-linux-gnueabihf","fixed_in":["2.34-6ubuntu1.11+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-common","fixed_in":["2.34-6ubuntu1.11+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-dev","fixed_in":["2.34-6ubuntu1.11+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-doc","fixed_in":["2.34-6ubuntu1.11+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-for-build","fixed_in":["2.34-6ubuntu1.11+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-for-host","fixed_in":["2.34-6ubuntu1.11+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-hppa-linux-gnu","fixed_in":["2.34-6ubuntu1.11+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-hppa64-linux-gnu","fixed_in":["2.34-6ubuntu1.11+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-i686-gnu","fixed_in":["2.34-6ubuntu1.11+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-i686-kfreebsd-gnu","fixed_in":["2.34-6ubuntu1.11+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-i686-linux-gnu","fixed_in":["2.34-6ubuntu1.11+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-ia64-linux-gnu","fixed_in":["2.34-6ubuntu1.11+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-m68k-linux-gnu","fixed_in":["2.34-6ubuntu1.11+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-multiarch","fixed_in":["2.34-6ubuntu1.11+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-multiarch-dev","fixed_in":["2.34-6ubuntu1.11+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-powerpc-linux-gnu","fixed_in":["2.34-6ubuntu1.11+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-powerpc64-linux-gnu","fixed_in":["2.34-6ubuntu1.11+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-powerpc64le-linux-gnu","fixed_in":["2.34-6ubuntu1.11+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-riscv64-linux-gnu","fixed_in":["2.34-6ubuntu1.11+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-s390x-linux-gnu","fixed_in":["2.34-6ubuntu1.11+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-sh4-linux-gnu","fixed_in":["2.34-6ubuntu1.11+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-source","fixed_in":["2.34-6ubuntu1.11+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-sparc64-linux-gnu","fixed_in":["2.34-6ubuntu1.11+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-x86-64-kfreebsd-gnu","fixed_in":["2.34-6ubuntu1.11+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-x86-64-linux-gnu","fixed_in":["2.34-6ubuntu1.11+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-x86-64-linux-gnux32","fixed_in":["2.34-6ubuntu1.11+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libbinutils","fixed_in":["2.34-6ubuntu1.11+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libctf-nobfd0","fixed_in":["2.34-6ubuntu1.11+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libctf0","fixed_in":["2.34-6ubuntu1.11+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"binutils","fixed_in":["2.46-1"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"binutils","fixed_in":["2.40-2.root.io.14","2.40-2.root.io.15","2.40-2.root.io.16","2.40-2.root.io.17","2.40-2.root.io.18","2.40-2.root.io.19","2.40-2.root.io.20","2.40-2.root.io.21","2.40-2.root.io.22","2.40-2.root.io.23","2.40-2.root.io.24","2.40-2.aikido.25"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"rootio-binutils","fixed_in":["2.40-2.root.io.14","2.40-2.root.io.15","2.40-2.root.io.16","2.40-2.root.io.17","2.40-2.root.io.18","2.40-2.root.io.19","2.40-2.root.io.20","2.40-2.root.io.21","2.40-2.root.io.22","2.40-2.root.io.23","2.40-2.root.io.24","2.40-2.aikido.25"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"binutils","fixed_in":["2.24-5ubuntu14.2+esm7"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"binutils","fixed_in":["2.26.1-1ubuntu1~16.04.8+esm13"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"binutils","fixed_in":["2.30-21ubuntu1~18.04.9+esm5"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"binutils","fixed_in":["2.34-6ubuntu1.11+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"binutils","fixed_in":["2.38-4ubuntu2.11"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"binutils","fixed_in":["2.42-4ubuntu2.7"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"binutils","fixed_in":["2.45-7ubuntu1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpaquita:23","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.39-r2"},{"fixed":"2.40-r10"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.44-r0"},{"fixed":"2.45-r2"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.40-r4"},{"fixed":"2.45-r2"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.39-r2"},{"fixed":"2.40-r10"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.44-r0"},{"fixed":"2.45-r2"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.40-r4"},{"fixed":"2.45-r2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els17"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-aarch64-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els17"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-alpha-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els17"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-arm-linux-gnueabi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els17"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-arm-linux-gnueabihf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els17"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els17"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els17"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-hppa-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els17"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-hppa64-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els17"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-m68k-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els17"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-mips-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els17"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-mips64-linux-gnuabi64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els17"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-mips64el-linux-gnuabi64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els17"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-mipsel-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els17"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-multiarch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els17"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-multiarch-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els17"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-powerpc-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els17"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-powerpc-linux-gnuspe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els17"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-powerpc64-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els17"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-powerpc64le-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els17"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-s390x-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els17"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-sh4-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els17"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els17"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-sparc64-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els17"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.9+tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"binutils-aarch64-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.9+tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"binutils-alpha-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.9+tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"binutils-arm-linux-gnueabi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.9+tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"binutils-arm-linux-gnueabihf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.9+tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"binutils-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.9+tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"binutils-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.9+tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"binutils-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.9+tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"binutils-for-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.9+tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"binutils-for-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.9+tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"binutils-hppa-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.9+tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"binutils-hppa64-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.9+tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"binutils-i686-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.9+tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"binutils-i686-kfreebsd-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.9+tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"binutils-i686-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.9+tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"binutils-ia64-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.9+tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"binutils-m68k-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.9+tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"binutils-mips-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.9+tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"binutils-mips64-linux-gnuabi64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.9+tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"binutils-mips64-linux-gnuabin32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.9+tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"binutils-mips64el-linux-gnuabi64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.9+tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"binutils-mips64el-linux-gnuabin32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.9+tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"binutils-mipsel-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.9+tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"binutils-mipsisa32r6-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.9+tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"binutils-mipsisa32r6el-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.9+tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"binutils-mipsisa64r6-linux-gnuabi64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.9+tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"binutils-mipsisa64r6-linux-gnuabin32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.9+tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"binutils-mipsisa64r6el-linux-gnuabi64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.9+tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"binutils-mipsisa64r6el-linux-gnuabin32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.9+tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"binutils-multiarch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.9+tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"binutils-multiarch-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.9+tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"binutils-powerpc-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.9+tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"binutils-powerpc-linux-gnuspe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.9+tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"binutils-powerpc64-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.9+tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"binutils-powerpc64le-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.9+tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"binutils-riscv64-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.9+tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"binutils-s390x-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.9+tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"binutils-sh4-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.9+tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"binutils-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.9+tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"binutils-sparc64-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.9+tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"binutils-x86-64-kfreebsd-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.9+tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"binutils-x86-64-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.9+tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"binutils-x86-64-linux-gnux32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.9+tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libbinutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.9+tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-aarch64-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-alpha-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-arm-linux-gnueabi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-arm-linux-gnueabihf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-for-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-for-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-hppa-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-hppa64-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-i686-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-i686-kfreebsd-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-i686-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-ia64-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-m68k-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-multiarch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-multiarch-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-powerpc-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-powerpc64-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-powerpc64le-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-riscv64-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-s390x-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-sh4-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-sparc64-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-x86-64-kfreebsd-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-x86-64-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-x86-64-linux-gnux32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libbinutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libctf-nobfd0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libctf0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.2-63.el9.tuxcare.els6"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"binutils-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.2-63.el9.tuxcare.els6"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"binutils-gold","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.2-63.el9.tuxcare.els6"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"cross-binutils-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.2-63.el9.tuxcare.els6"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"cross-binutils-ppc64le","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.2-63.el9.tuxcare.els6"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"cross-binutils-s390x","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.2-63.el9.tuxcare.els6"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.2-37.el9.tuxcare.els6"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"binutils-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.2-37.el9.tuxcare.els6"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"binutils-gold","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.2-37.el9.tuxcare.els6"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"cross-binutils-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.2-37.el9.tuxcare.els6"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"cross-binutils-ppc64le","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.2-37.el9.tuxcare.els6"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"cross-binutils-s390x","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.2-37.el9.tuxcare.els6"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27-44.base.el7_9.1.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"binutils-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27-44.base.el7_9.1.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.40-2","2.40.50.20230111-1","2.40.50.20230215-1","2.40.50.20230501-1","2.40.50.20230510-1","2.40.50.20230602-1","2.40.50.20230611-1","2.40.50.20230611-2","2.40.50.20230622-1","2.40.50.20230625-1","2.40.50.20230630-1","2.40.90.20230705-1","2.40.90.20230714-1","2.40.90.20230714-2","2.40.90.20230720-1","2.40.90.20230729-1","2.40.90.20230729-2","2.41-1","2.41-2","2.41-3","2.41-4","2.41-5","2.41-6","2.41-7","2.41.50.20230731-1","2.41.50.20230803-1","2.41.50.20230905-1","2.41.50.20231010-1","2.41.50.20231101-1","2.41.50.20231125-1","2.41.50.20231202-1","2.41.50.20231206-1","2.41.50.20231214-1","2.41.50.20231227-1","2.41.90.20240115-1","2.41.90.20240122-1","2.42-1","2.42-2","2.42-2+hurd.1","2.42-3","2.42-4","2.42.50.20240614-1","2.42.50.20240618-1","2.42.50.20240625-1","2.42.50.20240710-1","2.42.90.20240720-1","2.42.90.20240720-2","2.43-1","2.43-2","2.43.1-1","2.43.1-2","2.43.1-3","2.43.1-4","2.43.1-5","2.43.50.20240817-1","2.43.50.20240909-1","2.43.50.20241004-1","2.43.50.20241112-1","2.43.50.20241126-1","2.43.50.20241126-2","2.43.50.20241126-3","2.43.50.20241204-1","2.43.50.20241204-2","2.43.50.20241210-1","2.43.50.20241215-1","2.43.50.20241221-1","2.43.50.20241230-1","2.43.50.20250108-1","2.43.90.20250122-1","2.43.90.20250122-2","2.43.90.20250127-1","2.43.90.20250202-1","2.44-1","2.44-2","2.44-3","2.44.50.20250201-1","2.44.50.20250207-1","2.44.50.20250218-1","2.44.50.20250218-2","2.44.50.20250309-1","2.44.50.20250405-1","2.44.50.20250502-1","2.44.50.20250520-1","2.44.50.20250528-1","2.44.50.20250707-1","2.44.90.20250719-1","2.45-1","2.45-2","2.45-3","2.45-4","2.45-5","2.45-6","2.45-7","2.45-8","2.45.50.20250813-1","2.45.50.20250903-1","2.45.50.20251005-1","2.45.50.20251023-1","2.45.50.20251023-2","2.45.50.20251122-1","2.45.50.20251125-1","2.45.50.20251201-1","2.45.50.20251209-1","2.45.50.20260116-1","2.45.50.20260119-1","2.45.90.20260125-1","2.45.90.20260201-1","2.46-1","2.46-2","2.46-3","2.46.50.20260216-1","2.46.50.20260509-1","2.46.50.20260519-1","2.46.50.20260608-1","2.46.50.20260617-1","2.46.90.20260712-1","2.47-1","2.47-2","2.47-3","2.47-4","2.47-5","2.47-6","2.47.50.20260813-1","2.47.50.20260813-2","2.47.50.20260813-3","2.47.50.20260901-1","2.47.50.20261004-1"]},{"source":"osv","ecosystem":"Debian:13","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.44-3","2.44.50.20250201-1","2.44.50.20250207-1","2.44.50.20250218-1","2.44.50.20250218-2","2.44.50.20250309-1","2.44.50.20250405-1","2.44.50.20250502-1","2.44.50.20250520-1","2.44.50.20250528-1","2.44.50.20250707-1","2.44.90.20250719-1","2.45-1","2.45-2","2.45-3","2.45-4","2.45-5","2.45-6","2.45-7","2.45-8","2.45.50.20250813-1","2.45.50.20250903-1","2.45.50.20251005-1","2.45.50.20251023-1","2.45.50.20251023-2","2.45.50.20251122-1","2.45.50.20251125-1","2.45.50.20251201-1","2.45.50.20251209-1","2.45.50.20260116-1","2.45.50.20260119-1","2.45.90.20260125-1","2.45.90.20260201-1","2.46-1","2.46-2","2.46-3","2.46.50.20260216-1","2.46.50.20260509-1","2.46.50.20260519-1","2.46.50.20260608-1","2.46.50.20260617-1","2.46.90.20260712-1","2.47-1","2.47-2","2.47-3","2.47-4","2.47-5","2.47-6","2.47.50.20260813-1","2.47.50.20260813-2","2.47.50.20260813-3","2.47.50.20260901-1","2.47.50.20261004-1"]},{"source":"osv","ecosystem":"Debian:14","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.46-1"}]}],"versions":["2.44-3","2.44.50.20250201-1","2.44.50.20250207-1","2.44.50.20250218-1","2.44.50.20250218-2","2.44.50.20250309-1","2.44.50.20250405-1","2.44.50.20250502-1","2.44.50.20250520-1","2.44.50.20250528-1","2.44.50.20250707-1","2.44.90.20250719-1","2.45-1","2.45-2","2.45-3","2.45-4","2.45-5","2.45-6","2.45-7","2.45-8","2.45.50.20250813-1","2.45.50.20250903-1","2.45.50.20251005-1","2.45.50.20251023-1","2.45.50.20251023-2","2.45.50.20251122-1","2.45.50.20251125-1","2.45.50.20251201-1","2.45.50.20251209-1","2.45.50.20260116-1","2.45.50.20260119-1","2.45.90.20260125-1","2.45.90.20260201-1"]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1-11.oe2403sp2"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2-15.oe2003sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.1-16.oe2203sp3"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.1-16.oe2203sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1-11.oe2403"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1-11.oe2403sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.45.1-5.hum1"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"binutils-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.45.1-5.hum1"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"binutils-gold","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.45.1-5.hum1"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"binutils-gprofng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.45.1-5.hum1"}]}],"bundled":25},{"source":"osv","ecosystem":"Root:Debian:12","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.40-2.root.io.14"},{"fixed":"2.40-2.root.io.15"},{"fixed":"2.40-2.root.io.16"},{"fixed":"2.40-2.root.io.17"},{"fixed":"2.40-2.root.io.18"},{"fixed":"2.40-2.root.io.19"},{"fixed":"2.40-2.root.io.20"},{"fixed":"2.40-2.root.io.21"},{"fixed":"2.40-2.root.io.22"},{"fixed":"2.40-2.root.io.23"},{"fixed":"2.40-2.root.io.24"},{"fixed":"2.40-2.aikido.25"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"rootio-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.40-2.root.io.14"},{"fixed":"2.40-2.root.io.15"},{"fixed":"2.40-2.root.io.16"},{"fixed":"2.40-2.root.io.17"},{"fixed":"2.40-2.root.io.18"},{"fixed":"2.40-2.root.io.19"},{"fixed":"2.40-2.root.io.20"},{"fixed":"2.40-2.root.io.21"},{"fixed":"2.40-2.root.io.22"},{"fixed":"2.40-2.root.io.23"},{"fixed":"2.40-2.root.io.24"},{"fixed":"2.40-2.aikido.25"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24-5ubuntu14.2+esm7"}]}],"versions":["2.23.52.20130913-0ubuntu1","2.23.90.20131017-1ubuntu1","2.23.90.20131116-1ubuntu1","2.23.91.20131123-1ubuntu1","2.24-1ubuntu1","2.24-1ubuntu2","2.24-2ubuntu1","2.24-2ubuntu2","2.24-2ubuntu3","2.24-4ubuntu1","2.24-5ubuntu1","2.24-5ubuntu2","2.24-5ubuntu3","2.24-5ubuntu3.1","2.24-5ubuntu13","2.24-5ubuntu14","2.24-5ubuntu14.1","2.24-5ubuntu14.2","2.24-5ubuntu14.2+esm1","2.24-5ubuntu14.2+esm2","2.24-5ubuntu14.2+esm3","2.24-5ubuntu14.2+esm5","2.24-5ubuntu14.2+esm6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.8+esm13"}]}],"versions":["2.25.1-6ubuntu1","2.25.51.20151022-0ubuntu2","2.25.51.20151022-0ubuntu3","2.25.51.20151027-0ubuntu1","2.25.51.20151028-0ubuntu1","2.25.51.20151106-0ubuntu1","2.25.51.20151113-1ubuntu1","2.25.51.20151113-2ubuntu1","2.25.90.20151125-1ubuntu1","2.25.90.20151125-2ubuntu1","2.25.90.20151211-0ubuntu1","2.25.90.20151211-0ubuntu2","2.25.90.20160101-1ubuntu1","2.25.90.20160101-1ubuntu2","2.26-2ubuntu1","2.26-3ubuntu1","2.26-4ubuntu1","2.26-5ubuntu1","2.26-6ubuntu1","2.26-7ubuntu2","2.26-8ubuntu1","2.26-8ubuntu2","2.26-8ubuntu2.1","2.26.1-1ubuntu1~16.04","2.26.1-1ubuntu1~16.04.1","2.26.1-1ubuntu1~16.04.3","2.26.1-1ubuntu1~16.04.4","2.26.1-1ubuntu1~16.04.5","2.26.1-1ubuntu1~16.04.6","2.26.1-1ubuntu1~16.04.7","2.26.1-1ubuntu1~16.04.8","2.26.1-1ubuntu1~16.04.8+esm1","2.26.1-1ubuntu1~16.04.8+esm3","2.26.1-1ubuntu1~16.04.8+esm4","2.26.1-1ubuntu1~16.04.8+esm5","2.26.1-1ubuntu1~16.04.8+esm6","2.26.1-1ubuntu1~16.04.8+esm7","2.26.1-1ubuntu1~16.04.8+esm9","2.26.1-1ubuntu1~16.04.8+esm11","2.26.1-1ubuntu1~16.04.8+esm12"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.9+esm5"}]}],"versions":["2.29.1-4ubuntu1","2.29.1-6ubuntu1","2.29.1-7ubuntu1","2.29.1-8ubuntu1","2.29.1-10ubuntu1","2.29.1-12ubuntu1","2.30-4ubuntu1","2.30-5ubuntu1","2.30-7ubuntu1","2.30-8ubuntu1","2.30-9ubuntu1","2.30-10ubuntu1","2.30-11ubuntu1","2.30-14ubuntu2","2.30-15ubuntu1","2.30-20ubuntu2~18.04","2.30-21ubuntu1~18.04","2.30-21ubuntu1~18.04.1","2.30-21ubuntu1~18.04.2","2.30-21ubuntu1~18.04.3","2.30-21ubuntu1~18.04.4","2.30-21ubuntu1~18.04.5","2.30-21ubuntu1~18.04.7","2.30-21ubuntu1~18.04.8","2.30-21ubuntu1~18.04.9","2.30-21ubuntu1~18.04.9+esm1","2.30-21ubuntu1~18.04.9+esm3","2.30-21ubuntu1~18.04.9+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+esm1"}]}],"versions":["2.33-2ubuntu1","2.33.1-1ubuntu1","2.33.1-5ubuntu1","2.33.1-6ubuntu1","2.33.1-6ubuntu3","2.33.90.20200122-1ubuntu2","2.34-1ubuntu1","2.34-3ubuntu1","2.34-4ubuntu1","2.34-5ubuntu1","2.34-6ubuntu1","2.34-6ubuntu1.1","2.34-6ubuntu1.3","2.34-6ubuntu1.4","2.34-6ubuntu1.5","2.34-6ubuntu1.6","2.34-6ubuntu1.7","2.34-6ubuntu1.8","2.34-6ubuntu1.9","2.34-6ubuntu1.10","2.34-6ubuntu1.11"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.38-4ubuntu2.11"}]}],"versions":["2.37-7ubuntu1","2.37-9ubuntu1","2.37-10ubuntu1","2.37.50.20220106-2ubuntu1","2.37.90.20220126-0ubuntu1","2.37.90.20220130-0ubuntu2","2.38-1ubuntu1","2.38-2ubuntu1","2.38-3ubuntu1","2.38-4ubuntu2","2.38-4ubuntu2.1","2.38-4ubuntu2.2","2.38-4ubuntu2.3","2.38-4ubuntu2.4","2.38-4ubuntu2.5","2.38-4ubuntu2.6","2.38-4ubuntu2.7","2.38-4ubuntu2.8","2.38-4ubuntu2.10"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42-4ubuntu2.7"}]}],"versions":["2.41-5ubuntu1","2.41-6ubuntu1","2.41.50.20231206-1ubuntu1","2.41.50.20231214-1ubuntu1","2.41.50.20231227-1ubuntu1","2.41.90.20240122-1ubuntu1","2.42-2ubuntu1","2.42-3ubuntu1","2.42-4ubuntu1","2.42-4ubuntu2","2.42-4ubuntu2.3","2.42-4ubuntu2.4","2.42-4ubuntu2.5","2.42-4ubuntu2.6"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-7ubuntu1.1"}]}],"versions":["2.44-3ubuntu1","2.44.50.20250602-0ubuntu1","2.44.50.20250604-0ubuntu2","2.44.50.20250616-0ubuntu1","2.44.50.20250707-1ubuntu1","2.45-1ubuntu1","2.45-3ubuntu3","2.45-6ubuntu1","2.45-7ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24-5ubuntu14.2+esm7"}]}],"versions":["2.23.52.20130913-0ubuntu1","2.23.90.20131017-1ubuntu1","2.23.90.20131116-1ubuntu1","2.23.91.20131123-1ubuntu1","2.24-1ubuntu1","2.24-1ubuntu2","2.24-2ubuntu1","2.24-2ubuntu2","2.24-2ubuntu3","2.24-4ubuntu1","2.24-5ubuntu1","2.24-5ubuntu2","2.24-5ubuntu3","2.24-5ubuntu3.1","2.24-5ubuntu13","2.24-5ubuntu14","2.24-5ubuntu14.1","2.24-5ubuntu14.2","2.24-5ubuntu14.2+esm1","2.24-5ubuntu14.2+esm2","2.24-5ubuntu14.2+esm3","2.24-5ubuntu14.2+esm5","2.24-5ubuntu14.2+esm6"],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.8+esm13"}]}],"versions":["2.25.1-6ubuntu1","2.25.51.20151022-0ubuntu2","2.25.51.20151022-0ubuntu3","2.25.51.20151027-0ubuntu1","2.25.51.20151028-0ubuntu1","2.25.51.20151106-0ubuntu1","2.25.51.20151113-1ubuntu1","2.25.51.20151113-2ubuntu1","2.25.90.20151125-1ubuntu1","2.25.90.20151125-2ubuntu1","2.25.90.20151211-0ubuntu1","2.25.90.20151211-0ubuntu2","2.25.90.20160101-1ubuntu1","2.25.90.20160101-1ubuntu2","2.26-2ubuntu1","2.26-3ubuntu1","2.26-4ubuntu1","2.26-5ubuntu1","2.26-6ubuntu1","2.26-7ubuntu2","2.26-8ubuntu1","2.26-8ubuntu2","2.26-8ubuntu2.1","2.26.1-1ubuntu1~16.04","2.26.1-1ubuntu1~16.04.1","2.26.1-1ubuntu1~16.04.3","2.26.1-1ubuntu1~16.04.4","2.26.1-1ubuntu1~16.04.5","2.26.1-1ubuntu1~16.04.6","2.26.1-1ubuntu1~16.04.7","2.26.1-1ubuntu1~16.04.8","2.26.1-1ubuntu1~16.04.8+esm1","2.26.1-1ubuntu1~16.04.8+esm3","2.26.1-1ubuntu1~16.04.8+esm4","2.26.1-1ubuntu1~16.04.8+esm5","2.26.1-1ubuntu1~16.04.8+esm6","2.26.1-1ubuntu1~16.04.8+esm7","2.26.1-1ubuntu1~16.04.8+esm9","2.26.1-1ubuntu1~16.04.8+esm11","2.26.1-1ubuntu1~16.04.8+esm12"],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.9+esm5"}]}],"versions":["2.29.1-4ubuntu1","2.29.1-6ubuntu1","2.29.1-7ubuntu1","2.29.1-8ubuntu1","2.29.1-10ubuntu1","2.29.1-12ubuntu1","2.30-4ubuntu1","2.30-5ubuntu1","2.30-7ubuntu1","2.30-8ubuntu1","2.30-9ubuntu1","2.30-10ubuntu1","2.30-11ubuntu1","2.30-14ubuntu2","2.30-15ubuntu1","2.30-20ubuntu2~18.04","2.30-21ubuntu1~18.04","2.30-21ubuntu1~18.04.1","2.30-21ubuntu1~18.04.2","2.30-21ubuntu1~18.04.3","2.30-21ubuntu1~18.04.4","2.30-21ubuntu1~18.04.5","2.30-21ubuntu1~18.04.7","2.30-21ubuntu1~18.04.8","2.30-21ubuntu1~18.04.9","2.30-21ubuntu1~18.04.9+esm1","2.30-21ubuntu1~18.04.9+esm3","2.30-21ubuntu1~18.04.9+esm4"],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+esm1"}]}],"versions":["2.33-2ubuntu1","2.33.1-1ubuntu1","2.33.1-5ubuntu1","2.33.1-6ubuntu1","2.33.1-6ubuntu3","2.33.90.20200122-1ubuntu2","2.34-1ubuntu1","2.34-3ubuntu1","2.34-4ubuntu1","2.34-5ubuntu1","2.34-6ubuntu1","2.34-6ubuntu1.1","2.34-6ubuntu1.3","2.34-6ubuntu1.4","2.34-6ubuntu1.5","2.34-6ubuntu1.6","2.34-6ubuntu1.7","2.34-6ubuntu1.8","2.34-6ubuntu1.9","2.34-6ubuntu1.10","2.34-6ubuntu1.11"],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.38-4ubuntu2.11"}]}],"versions":["2.37-7ubuntu1","2.37-9ubuntu1","2.37-10ubuntu1","2.37.50.20220106-2ubuntu1","2.37.90.20220126-0ubuntu1","2.37.90.20220130-0ubuntu2","2.38-1ubuntu1","2.38-2ubuntu1","2.38-3ubuntu1","2.38-4ubuntu2","2.38-4ubuntu2.1","2.38-4ubuntu2.2","2.38-4ubuntu2.3","2.38-4ubuntu2.4","2.38-4ubuntu2.5","2.38-4ubuntu2.6","2.38-4ubuntu2.7","2.38-4ubuntu2.8","2.38-4ubuntu2.10"],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42-4ubuntu2.7"}]}],"versions":["2.41-5ubuntu1","2.41-6ubuntu1","2.41.50.20231206-1ubuntu1","2.41.50.20231214-1ubuntu1","2.41.50.20231227-1ubuntu1","2.41.90.20240122-1ubuntu1","2.42-2ubuntu1","2.42-3ubuntu1","2.42-4ubuntu1","2.42-4ubuntu2","2.42-4ubuntu2.3","2.42-4ubuntu2.4","2.42-4ubuntu2.5","2.42-4ubuntu2.6"],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-7ubuntu1.1"}]}],"versions":["2.44-3ubuntu1","2.44.50.20250602-0ubuntu1","2.44.50.20250604-0ubuntu2","2.44.50.20250616-0ubuntu1","2.44.50.20250707-1ubuntu1","2.45-1ubuntu1","2.45-3ubuntu3","2.45-6ubuntu1","2.45-7ubuntu1"],"bundled":11},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.47-1.1"}]}],"bundled":16}],"products":[{"vendor":"gnu","product":"binutils"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"}],"references":[{"url":"https://vuldb.com/?id.328775","tags":["vdb-entry","technical-description","Third Party Advisory","VDB Entry","advisory","article","report"]},{"url":"https://vuldb.com/?ctiid.328775","tags":["signature","permissions-required","Permissions Required","VDB Entry","report","article"]},{"url":"https://vuldb.com/?submit.661281","tags":["third-party-advisory","Third Party Advisory","VDB Entry","advisory","article","report"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33455","tags":["issue-tracking","Exploit","Issue Tracking","report","article"]},{"url":"https://sourceware.org/bugzilla/attachment.cgi?id=16351","tags":["exploit","Exploit","evidence","article","report"]},{"url":"https://sourceware.org/bugzilla/attachment.cgi?id=16357","tags":["patch","Not Applicable","fix","article","report"]},{"url":"https://www.gnu.org/","tags":["product","Product","web","article","report"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11840","tags":["advisory"]},{"url":"https://www.gnu.org"},{"url":"https://github.com/advisories/GHSA-jp92-pqpq-f69p"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2025-11840","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2025-1765289777.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2025-1765478108.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2025-1766412859.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1775726631.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1777949670.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1786357058.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11839","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/11xxx/CVE-2025-11840.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-11840","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2624","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11412","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2625","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2626","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2627","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2628","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11083","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2629","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:7098","tags":["advisory"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-69645","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-11083","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-11082","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-11081","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-11840","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-11839","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-11495","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-11494","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-11414","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-11413","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-11412","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-66866","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-66864","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-66862","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-66863","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-66861","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-66865","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-69648","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-69647","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-69646","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-69650","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-69652","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-69651","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-69649","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-69644","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7098.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2399944","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-11081","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11081","tags":["advisory"]},{"url":"https://github.com/user-attachments/files/20623354/hdf5_crash_3.txt","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33406","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33406#c2","tags":["article"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=f87a66db645caf8cc0e6fc87b0c28c78a38af59b","tags":["article"]},{"url":"https://vuldb.com/?ctiid.326122","tags":["article"]},{"url":"https://vuldb.com/?id.326122","tags":["article"]},{"url":"https://vuldb.com/?submit.661275","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2399943","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-11082","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11082","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/attachment.cgi?id=16358","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33464","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33464#c2","tags":["article"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ea1a0737c7692737a644af0486b71e4a392cbca8","tags":["article"]},{"url":"https://vuldb.com/?ctiid.326123","tags":["article"]},{"url":"https://vuldb.com/?id.326123","tags":["article"]},{"url":"https://vuldb.com/?submit.661276","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2399948","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-11083","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/attachment.cgi?id=16353","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33457","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33457#c1","tags":["article"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=9ca499644a21ceb3f946d1c179c38a83be084490","tags":["article"]},{"url":"https://vuldb.com/?ctiid.326124","tags":["article"]},{"url":"https://vuldb.com/?id.326124","tags":["article"]},{"url":"https://vuldb.com/?submit.661277","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2402425","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-11412","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33452","tags":["article"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=047435dd988a3975d40c6626a8f739a0b2e154bc","tags":["article"]},{"url":"https://vuldb.com/?id.327348","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2402423","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-11413","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11413","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33456","tags":["article"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=72efdf166aa0ed72ecc69fc2349af6591a7a19c0","tags":["article"]},{"url":"https://vuldb.com/?id.327349","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2402424","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-11414","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11414","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33450","tags":["article"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=aeaaa9af6359c8e394ce9cf24911fec4f4d23703","tags":["article"]},{"url":"https://vuldb.com/?id.327350","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2402559","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-11494","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11494","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/attachment.cgi?id=16389","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33499","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33499#c2","tags":["article"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=b6ac5a8a5b82f0ae6a4642c8d7149b325f4cc60a","tags":["article"]},{"url":"https://vuldb.com/?ctiid.327619","tags":["article"]},{"url":"https://vuldb.com/?id.327619","tags":["article"]},{"url":"https://vuldb.com/?submit.668281","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2402584","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-11495","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11495","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/attachment.cgi?id=16393","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33502","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33502#c3","tags":["article"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=6b21c8b2ecfef5c95142cbc2c32f185cb1c26ab0","tags":["article"]},{"url":"https://vuldb.com/?ctiid.327620","tags":["article"]},{"url":"https://vuldb.com/?id.327620","tags":["article"]},{"url":"https://vuldb.com/?submit.668290","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2404439","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-11839","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/attachment.cgi?id=16344","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33448","tags":["article"]},{"url":"https://vuldb.com/?ctiid.328774","tags":["article"]},{"url":"https://vuldb.com/?id.328774","tags":["article"]},{"url":"https://vuldb.com/?submit.661279","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2404481","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-11840","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2425823","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-66861","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66861","tags":["advisory"]},{"url":"https://github.com/caozhzh/CRGF-Vul/blob/main/cxxfilt/crash1.md","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2425825","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-66862","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66862","tags":["advisory"]},{"url":"https://github.com/caozhzh/CRGF-Vul/blob/main/cxxfilt/crash3.md","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2425824","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-66863","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66863","tags":["advisory"]},{"url":"https://github.com/caozhzh/CRGF-Vul/blob/main/cxxfilt/crash2.md","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2425827","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-66864","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66864","tags":["advisory"]},{"url":"https://github.com/caozhzh/CRGF-Vul/blob/main/cxxfilt/crash5.md","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2425822","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-66865","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66865","tags":["advisory"]},{"url":"https://github.com/caozhzh/CRGF-Vul/blob/main/cxxfilt/crash4.md","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2425830","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-66866","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66866","tags":["advisory"]},{"url":"https://github.com/caozhzh/CRGF-Vul/blob/main/cxxfilt/crash6.md","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2445263","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-69644","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-69644","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33639","tags":["article"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=455446bbdc8675f34808187de2bbad4682016ff7","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2445261","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-69645","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-69645","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33637","tags":["article"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=cdb728d4da6184631989b192f1022c219dea7677","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2445264","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-69646","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-69646","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33638","tags":["article"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=598704a00cbac5e85c2bedd363357b5bf6fcee33","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2445773","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-69647","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-69647","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33640","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2445774","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-69648","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-69648","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33641","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2445298","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-69649","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-69649","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33697","tags":["article"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=66a3492ce68e1ae45b2489bd9a815c39ea5d7f66","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2445293","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-69650","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-69650","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33698","tags":["article"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ea4bc025abdba85a90e26e13f551c16a44bfa921","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2445299","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-69651","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-69651","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33700","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2445296","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-69652","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-69652","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33701","tags":["article"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=44b79abd0fa12e7947252eb4c6e5d16ed6033e01","tags":["article"]},{"url":"https://ubuntu.com/security/CVE-2025-11840","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7899-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-0840","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-1153","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-1181","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-1182","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-3198","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-5244","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-5245","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-7545","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-8225","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-11839","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11082","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11839","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-69644","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-69645","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-69646","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-69647","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-69648","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-69649","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-69652","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-15003","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-18220","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3441","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3442","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4647","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6846","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2025-11840","title":"GNU Binutils ldmisc.c vfinfo out-of-bounds","description":"A weakness has been identified in GNU Binutils 2.45. The affected element is the function vfinfo of the file ldmisc.c. Executing a manipulation can lead to out-of-bounds read. The attack can only be executed locally. The exploit has been made available to the public and could be used for attacks. This patch is called 16357. It is best practice to apply a patch to resolve this issue.","status":"published","published":"2025-10-16T15:32:11.651Z","modified":"2026-10-15T01:02:36.901Z","cvss":[{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P","level":"medium","assessor":"cna"},{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C","level":"low","assessor":"cna"},{"version":"3.0","score":3.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C","level":"low","assessor":"cna"},{"version":"2.0","score":1.7,"vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P/E:POC/RL:OF/RC:C","assessor":"cna"}],"cwes":["CWE-125","CWE-119"],"updated_at":"2026-11-02T14:32:51.199669Z"}],"euvd":[{"id":"EUVD-2025-34771","description":"A weakness has been identified in GNU Binutils 2.45. The affected element is the function vfinfo of the file ldmisc.c. Executing a manipulation can lead to out-of-bounds read. The attack can only be executed locally. The exploit has been made available to the public and could be used for attacks. This patch is called 16357. It is best practice to apply a patch to resolve this issue.","status":"published","published":"2025-10-16T15:32:11Z","modified":"2026-10-15T01:02:36Z","cvss":[{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P","level":"medium"}],"updated_at":"2026-11-02T17:27:08.111721Z"}],"ghsa":[{"id":"GHSA-jp92-pqpq-f69p","title":"A weakness has been identified in GNU Binutils 2.45. The affected element is the function vfinfo...","description":"A weakness has been identified in GNU Binutils 2.45. The affected element is the function vfinfo of the file ldmisc.c. Executing manipulation can lead to out-of-bounds read. The attack can only be executed locally. The exploit has been made available to the public and could be exploited. This patch is called 16357. It is best practice to apply a patch to resolve this issue.","status":"published","published":"2025-10-16T18:30:24Z","modified":"2026-05-12T15:31:12Z","cvss":[{"version":"4.0","score":1.9,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"low"},{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-119","CWE-125"],"updated_at":"2026-11-02T15:08:03.879292Z"}],"nvd":[{"id":"CVE-2025-11840","description":"A weakness has been identified in GNU Binutils 2.45. The affected element is the function vfinfo of the file ldmisc.c. Executing a manipulation can lead to out-of-bounds read. The attack can only be executed locally. The exploit has been made available to the public and could be used for attacks. This patch is called 16357. It is best practice to apply a patch to resolve this issue.","status":"published","published":"2025-10-16T16:15:37.003Z","modified":"2026-10-09T10:10:00.193Z","cvss":[{"version":"4.0","score":1.9,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"low","assessor":"secondary"},{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"secondary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":1.7,"vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","level":"low","assessor":"secondary"}],"cwes":["CWE-119","CWE-125"],"updated_at":"2026-11-02T14:11:39.069866Z"}],"osv":[{"id":"BELL-CVE-2025-11840","status":"published","published":"2025-10-17T06:04:46.146464Z","modified":"2026-01-26T09:41:22.55459Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:21.227396Z"},{"id":"CVE-2025-11840","title":"GNU Binutils ldmisc.c vfinfo out-of-bounds","description":"A weakness has been identified in GNU Binutils 2.45. The affected element is the function vfinfo of the file ldmisc.c. Executing a manipulation can lead to out-of-bounds read. The attack can only be executed locally. The exploit has been made available to the public and could be used for attacks. This patch is called 16357. It is best practice to apply a patch to resolve this issue.","status":"published","published":"2025-10-16T15:32:11.651Z","modified":"2026-10-28T02:30:42.22624039Z","cvss":[{"version":"4.0","score":1.9,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P","level":"low"}],"cwes":["CWE-119","CWE-125"],"updated_at":"2026-11-02T15:44:46.024537Z"},{"id":"DEBIAN-CVE-2025-11840","description":"A weakness has been identified in GNU Binutils 2.45. The affected element is the function vfinfo of the file ldmisc.c. Executing a manipulation can lead to out-of-bounds read. The attack can only be executed locally. The exploit has been made available to the public and could be used for attacks. This patch is called 16357. It is best practice to apply a patch to resolve this issue.","status":"published","published":"2025-10-16T16:15:37.003Z","modified":"2026-10-10T10:00:06.94679851Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:45.102284Z"},{"id":"OESA-2025-2624","title":"gdb security update","description":"GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed.\r\n\r\nSecurity Fix(es):\n\nA vulnerability has been found in GNU Binutils 2.45. This impacts the function bfd_elf_gc_record_vtentry of the file bfd/elflink.c of the component Linker. The manipulation leads to out-of-bounds read. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier of the patch is 047435dd988a3975d40c6626a8f739a0b2e154bc. To fix this issue, it is recommended to deploy a patch.(CVE-2025-11412)\n\nA weakness has been identified in GNU Binutils 2.45. The affected element is the function vfinfo of the file ldmisc.c. Executing manipulation can lead to out-of-bounds read. The attack can only be executed locally. The exploit has been made available to the public and could be exploited. This patch is called 16357. It is best practice to apply a patch to resolve this issue.(CVE-2025-11840)","status":"published","published":"2025-11-07T11:09:44Z","modified":"2026-08-18T01:19:18.474709941Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"OESA-2025-2625","title":"gdb security update","description":"GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed.\r\n\r\nSecurity Fix(es):\n\nA vulnerability has been found in GNU Binutils 2.45. This impacts the function bfd_elf_gc_record_vtentry of the file bfd/elflink.c of the component Linker. The manipulation leads to out-of-bounds read. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier of the patch is 047435dd988a3975d40c6626a8f739a0b2e154bc. To fix this issue, it is recommended to deploy a patch.(CVE-2025-11412)\n\nA weakness has been identified in GNU Binutils 2.45. The affected element is the function vfinfo of the file ldmisc.c. Executing manipulation can lead to out-of-bounds read. The attack can only be executed locally. The exploit has been made available to the public and could be exploited. This patch is called 16357. It is best practice to apply a patch to resolve this issue.(CVE-2025-11840)","status":"published","published":"2025-11-07T11:09:44Z","modified":"2026-08-18T01:19:18.43212856Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"OESA-2025-2626","title":"gdb security update","description":"GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed.\r\n\r\nSecurity Fix(es):\n\nA vulnerability has been found in GNU Binutils 2.45. This impacts the function bfd_elf_gc_record_vtentry of the file bfd/elflink.c of the component Linker. The manipulation leads to out-of-bounds read. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier of the patch is 047435dd988a3975d40c6626a8f739a0b2e154bc. To fix this issue, it is recommended to deploy a patch.(CVE-2025-11412)\n\nA weakness has been identified in GNU Binutils 2.45. The affected element is the function vfinfo of the file ldmisc.c. Executing manipulation can lead to out-of-bounds read. The attack can only be executed locally. The exploit has been made available to the public and could be exploited. This patch is called 16357. It is best practice to apply a patch to resolve this issue.(CVE-2025-11840)","status":"published","published":"2025-11-07T11:09:45Z","modified":"2026-08-18T01:19:18.37821721Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"OESA-2025-2627","title":"gdb security update","description":"GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed.\r\n\r\nSecurity Fix(es):\n\nA vulnerability has been found in GNU Binutils 2.45. This impacts the function bfd_elf_gc_record_vtentry of the file bfd/elflink.c of the component Linker. The manipulation leads to out-of-bounds read. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier of the patch is 047435dd988a3975d40c6626a8f739a0b2e154bc. To fix this issue, it is recommended to deploy a patch.(CVE-2025-11412)\n\nA weakness has been identified in GNU Binutils 2.45. The affected element is the function vfinfo of the file ldmisc.c. Executing manipulation can lead to out-of-bounds read. The attack can only be executed locally. The exploit has been made available to the public and could be exploited. This patch is called 16357. It is best practice to apply a patch to resolve this issue.(CVE-2025-11840)","status":"published","published":"2025-11-07T11:09:45Z","modified":"2026-08-18T01:19:18.393006984Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"OESA-2025-2628","title":"gdb security update","description":"GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed.\r\n\r\nSecurity Fix(es):\n\nA critical vulnerability (CWE-122) has been found in GNU Binutils 2.45. This is a heap overflow condition where the buffer overflow occurs in the heap memory region, generally meaning the buffer was allocated using routines like malloc(). This vulnerability impacts confidentiality, integrity, and availability. The exploit is available for download at sourceware.org and is declared as proof-of-concept. The code maintainer replied with  [f]ixed for 2.46 . Applying patch 9ca499644a21ceb3f946d1c179c38a83be084490 can eliminate this problem. The bugfix is ready for download at sourceware.org.(CVE-2025-11083)\n\nA vulnerability has been found in GNU Binutils 2.45. This impacts the function bfd_elf_gc_record_vtentry of the file bfd/elflink.c of the component Linker. The manipulation leads to out-of-bounds read. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier of the patch is 047435dd988a3975d40c6626a8f739a0b2e154bc. To fix this issue, it is recommended to deploy a patch.(CVE-2025-11412)\n\nA weakness has been identified in GNU Binutils 2.45. The affected element is the function vfinfo of the file ldmisc.c. Executing manipulation can lead to out-of-bounds read. The attack can only be executed locally. The exploit has been made available to the public and could be exploited. This patch is called 16357. It is best practice to apply a patch to resolve this issue.(CVE-2025-11840)","status":"published","published":"2025-11-07T11:09:45Z","modified":"2026-08-18T01:19:18.486269131Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"OESA-2025-2629","title":"gdb security update","description":"GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed.\r\n\r\nSecurity Fix(es):\n\nA vulnerability has been found in GNU Binutils 2.45. This impacts the function bfd_elf_gc_record_vtentry of the file bfd/elflink.c of the component Linker. The manipulation leads to out-of-bounds read. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier of the patch is 047435dd988a3975d40c6626a8f739a0b2e154bc. To fix this issue, it is recommended to deploy a patch.(CVE-2025-11412)\n\nA weakness has been identified in GNU Binutils 2.45. The affected element is the function vfinfo of the file ldmisc.c. Executing manipulation can lead to out-of-bounds read. The attack can only be executed locally. The exploit has been made available to the public and could be exploited. This patch is called 16357. It is best practice to apply a patch to resolve this issue.(CVE-2025-11840)","status":"published","published":"2025-11-07T11:09:45Z","modified":"2026-08-18T01:19:18.407438899Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"RHSA-2026:7098","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-04-18T10:06:19Z","modified":"2026-10-15T10:25:31Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2025-11840","title":"CVE-2025-11840 in binutils - Patched by Root","description":"Root has patched CVE-2025-11840 in the binutils package for Root:Debian:12. Multiple fixed versions available.","status":"published","published":"2026-08-25T10:13:46Z","modified":"2026-08-26T01:10:39.986418384Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:30.983521Z"},{"id":"UBUNTU-CVE-2025-11840","description":"A weakness has been identified in GNU Binutils 2.45. The affected element is the function vfinfo of the file ldmisc.c. Executing a manipulation can lead to out-of-bounds read. The attack can only be executed locally. The exploit has been made available to the public and could be used for attacks. This patch is called 16357. It is best practice to apply a patch to resolve this issue.","status":"published","published":"2025-10-16T16:15:00Z","modified":"2026-04-22T15:29:47.043707Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"},{"version":"4.0","score":1.9,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P","level":"low"}],"updated_at":"2026-11-02T16:55:20.144818Z"},{"id":"CLSA-2025-1765289777","title":"Fix CVE(s): CVE-2025-11839, CVE-2025-11840","description":"   * SECURITY UPDATE: remove abort call in debug format printing code\n     - debian/patches/CVE-2025-11839.patch: remove call to abort in the\n       debug format printing code, allowing display of fuzzed input files to\n       complete without triggering an abort\n     - CVE-2025-11839\n   * SECURITY UPDATE: fix SEGV in vfinfo\n     - debian/patches/CVE-2025-11840.patch: prevent segmentation fault by\n       checking for NULL name in reloc howto structure in coff_slurp_reloc_table\n     - CVE-2025-11840","status":"published","published":"2025-12-09T17:25:41Z","modified":"2026-06-04T10:03:22.831619Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"CLSA-2025-1765478108","title":"Fix CVE(s): CVE-2025-11839, CVE-2025-11840","description":"   * SECURITY UPDATE: remove abort call in debug format printing code\n     - debian/patches/CVE-2025-11839.patch: remove call to abort in the\n       debug format printing code, allowing display of fuzzed input files to\n       complete without triggering an abort\n     - CVE-2025-11839\n   * SECURITY UPDATE: fix SEGV in vfinfo\n     - debian/patches/CVE-2025-11840.patch: prevent segmentation fault by\n       checking for NULL name in reloc howto structure in coff_slurp_reloc_table\n     - CVE-2025-11840","status":"published","published":"2025-12-11T18:35:12Z","modified":"2026-06-04T10:04:27.637609Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"CLSA-2025-1766412859","title":"Fix CVE(s): CVE-2025-11840","description":"   * SECURITY UPDATE: out-of-bounds read via vfinfo function in ldmisc.c\n     (CVE-16357)\n     - debian/patches/CVE-2025-11840.patch: Prevent a NULL name for reloc howto\n       at ld misc.c:527 to avoid a SEGV\n     - CVE-2025-11840","status":"published","published":"2025-12-22T14:14:23Z","modified":"2026-06-04T10:03:21.133976Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"CLSA-2026-1775726631","title":"binutils: Fix of 9 CVEs","description":"- CVE-2023-1972: fix heap buffer overflow in _bfd_elf_slurp_version_tables\n- CVE-2025-11412: fix out-of-bounds read in bfd_elf_gc_record_vtentry\n- CVE-2025-11413: fix out-of-bounds read in elf_link_add_object_symbols\n- CVE-2025-11839: fix abort in tg_tag_type with fuzzed input\n- CVE-2025-11840: fix SEGV from NULL howto name in coff reloc processing\n- CVE-2025-3198: fix memory leak in objdump display_info\n- CVE-2025-69645: fix abort in byte_get_little_endian from malformed DWARF\n- CVE-2025-69652: fix abort in readelf from malformed DWARF debug info\n- CVE-2026-4647: fix out-of-bounds read in XCOFF relocation processing","status":"published","published":"2026-04-24T09:04:21Z","modified":"2026-06-01T00:32:46.809443471Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1777949670","title":"binutils: Fix of 8 CVEs","description":"- CVE-2025-11412: fix out-of-bounds read in bfd_elf_gc_record_vtentry\n- CVE-2025-11413: fix out-of-bounds read in elf_link_add_object_symbols\n- CVE-2025-11839: fix abort in tg_tag_type with fuzzed input\n- CVE-2025-11840: fix SEGV from NULL howto name in coff reloc processing\n- CVE-2025-3198: fix memory leak in objdump display_info\n- CVE-2026-4647: fix out-of-bounds read in XCOFF relocation processing\n- CVE-2025-69645: fix abort in byte_get_little_endian from malformed DWARF\n- CVE-2025-69652: fix abort in readelf from malformed DWARF debug info","status":"published","published":"2026-05-05T02:54:34Z","modified":"2026-10-21T10:45:54.816006313Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"CLSA-2026-1786357058","title":"binutils: Fix of 2 CVEs","description":"- CVE-2025-11839: fix reachable abort in tg_tag_type (binutils/prdbg.c)\n- CVE-2025-11840: fix NULL-name reloc howto escaping coff_slurp_reloc_table (bfd/coffcode.h)","status":"published","published":"2026-08-13T12:48:23Z","modified":"2026-10-26T09:31:42.703927026Z","updated_at":"2026-11-02T15:43:46.850893Z"},{"id":"openSUSE-SU-2026:11932-1","title":"binutils-2.47-1.1 on GA media","description":"These are all security issues fixed in the binutils-2.47-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-09-30T00:00:00Z","modified":"2026-10-01T11:15:05.44014221Z","updated_at":"2026-11-02T16:58:40.245664Z"},{"id":"USN-7899-1","title":"binutils vulnerabilities","description":"It was discovered that GNU binutils could be forced to perform an out-\nof-bounds read in certain instances. An attacker with local access to\na system could possibly use this issue to cause a denial of service.\n(CVE-2025-11839, CVE-2025-11840)\n\nIt was discovered that GNU binutils incorrectly handled certain inputs.\nAn attacker could possibly use this issue to cause a denial of service.\nThis issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04\nLTS, and Ubuntu 20.04 LTS. (CVE-2025-8225)\n\nIt was discovered that GNU binutils incorrectly handled certain inputs.\nAn attacker could possibly use this issue to cause a crash or\nexecute arbitrary code. This issue only affected Ubuntu 14.04 LTS,\nUbuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS.\n(CVE-2025-5244, CVE-2025-5245)\n\nIt was discovered that GNU binutils incorrectly handled certain inputs.\nAn attacker could possibly use this issue to cause a denial of service.\nThis issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.\n(CVE-2025-3198)\n\nIt was discovered that GNU binutils incorrectly handled certain files.\nAn attacker could possibly use this issue to cause a crash. This issue\nonly affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS.\n(CVE-2025-1182)\n\nIt was discovered that ld in GNU binutils incorrectly handled certain\nfiles. An attacker could possibly use this issue to cause a crash,\nexpose sensitive information or execute arbitrary code. This issue\nonly affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS.\n(CVE-2025-1181)\n\nIt was discovered that GNU binutils incorrectly handled certain inputs.\nAn attacker could possibly use this issue to cause a crash, expose\nsensitive information or execute arbitrary code. This issue only\naffected Ubuntu 25.04. (CVE-2025-1153)\n\nIt was discovered that GNU binutils incorrectly handled certain inputs.\nAn attacker could possibly use this issue to cause a crash or execute\narbitrary code. This issue only affected Ubuntu 14.04 LTS.\n(CVE-2025-0840)","status":"published","published":"2025-12-01T14:21:50Z","modified":"2026-06-25T13:32:31.9235076Z","updated_at":"2026-11-02T16:58:21.91885Z"}]}}