Medium 5.3Published Sep 27, 2025

CVE-2025-11082GNU Binutils Linker elf-eh-frame.c _bfd_elf_parse_eh_frame heap-based overflow

Updated under an hour ago (Oct 26, 2026, 2:00 PM ET)

Does this affect you?

It affects GNU Binutils and 3 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for GNU Binutils

Exploited in the last 30 days

A flaw has been found in GNU Binutils 2.45. Impacted is the function _bfd_elf_parse_eh_frame of the file bfd/elf-eh-frame.c of the component Linker. Executing manipulation can lead to heap-based buffer overflow. The attack is restricted to local execution. The exploit has been published and may be used. This patch is called ea1a0737c7692737a644af0486b71e4a392cbca8. A patch should be applied to remediate this issue. The code maintainer replied with "[f]ixed for 2.46".

CVSS: 5.3 MEDIUM (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C
Weakness (CWE): CWE-122, CWE-119
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: VulDB
NVD analysis: Modified
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

GNU Binutils gnu:binutils (from the name)	2.45	CNA record
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.5	CISA ADP
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518f_4_pn_dp_mfp (from the name)	from V3.1.5	CISA ADP
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP siemens:siplus_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.5	CISA ADP
gnu binutils gnu:binutils	2.45	NVD

References

References

https://vuldb.com/?id.326123	vdb-entry, technical-description, third-party-advisory
https://vuldb.com/?ctiid.326123	signature, permissions-required, vdb-entry
https://vuldb.com/?submit.661276	third-party-advisory, vdb-entry
https://sourceware.org/bugzilla/show_bug.cgi?id=33464	issue-tracking, exploit
https://sourceware.org/bugzilla/show_bug.cgi?id=33464#c2	issue-tracking, exploit
https://sourceware.org/bugzilla/attachment.cgi?id=16358	exploit, broken-link
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ea1a0737c7692737a644af0486b71e4a392cbca8	patch
https://www.gnu.org/	product
https://cert-portal.siemens.com/productcert/html/ssa-082556.html

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.