CVE-2025-11839
Published: October 17, 2025Last modified: October 18, 2025
Description
A security flaw has been discovered in GNU Binutils 2.45. Impacted is the function tg_tag_type of the file prdbg.c. Performing manipulation results in unchecked return value. The attack needs to be approached locally. The exploit has been released to the public and may be exploited.
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score | 5.5 |
| Attack Vector | LOCAL |
| Attack complexity | LOW |
| Privileges required | LOW |
| User interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality | NONE |
| Integrity impact | NONE |
| Availability impact | HIGH |
| Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Status
| Product | Release | Package | Status |
|---|---|---|---|
| Alpaquita Linux | 23 LTS | binutils | Vulnerable (2.39-r2) |
| 25 LTS | binutils | Vulnerable (2.44-r0) | |
| Stream | binutils | Vulnerable (2.40-r4) | |
| Hardened Containers | 23 LTS | binutils | Vulnerable (2.39-r2) |
| Stream | binutils | Vulnerable (2.40-r4) |