CVE-2025-11839

LOW

GNU Binutils <2.45 - Unchecked Return Value

Title source: llm
STIX 2.1

Description

A security flaw has been discovered in GNU Binutils 2.45. Impacted is the function tg_tag_type of the file prdbg.c. Performing a manipulation results in unchecked return value. The attack needs to be approached locally. The exploit has been released to the public and may be used for attacks.

Scores

CVSS v3 3.3
EPSS 0.0002
EPSS Percentile 6.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-252 CWE-253
Status published
Products (1)
gnu/binutils 2.45
Published Oct 16, 2025
Tracked Since Feb 18, 2026