A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elf_swap_shdr in the library bfd/elfcode.h of the component Linker. The manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit has been disclosed to the public and may be used. The identifier of the patch is 9ca499644a21ceb3f946d1c179c38a83be084490. To fix this issue, it is recommended to deploy a patch. The code maintainer replied with "[f]ixed for 2.46".
CVSS Details
- CVSS 4.0 Base Score: 1.9 (LOW)
- CVSS 4.0 Vector: (CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gcc-toolset-13-binutils-goldUpgrade gcc-toolset-15-binutils-develUpgrade binutilsUpgrade gcc-toolset-14-binutilsUpgrade gcc-toolset-13-binutils-develUpgrade gcc-toolset-15-binutils-gprofngUpgrade gcc-toolset-13-binutilsUpgrade binutils-develUpgrade gcc-toolset-15-binutilsUpgrade gcc-toolset-15-binutils-goldUpgrade binutils-goldUpgrade gcc-toolset-14-binutils-develUpgrade gcc-toolset-14-binutils-goldUpgrade gcc-toolset-14-binutils-gprofng | Dec 23, 2025 | Dec 16, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade gdb-headlessUpgrade gdb-helpUpgrade gdb | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade gdb-headlessUpgrade gdbUpgrade gdb-help | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade gdbUpgrade gdb-headlessUpgrade gdb-help | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade gdb-headlessUpgrade gdbUpgrade gdb-help | Mar 10, 2026 | Mar 10, 2026 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Mar 26, 2026 |
| Oracle_linux | — | Upgrade gcc-toolset-14-binutils-gprofngUpgrade binutilsUpgrade gcc-toolset-15-binutils-goldUpgrade gcc-toolset-13-binutils-goldUpgrade gcc-toolset-13-binutils-develUpgrade binutils-gprofngUpgrade gcc-toolset-15-binutils-develUpgrade gcc-toolset-14-binutilsUpgrade gcc-toolset-15-binutils-gprofngUpgrade gcc-toolset-13-binutilsUpgrade gcc-toolset-14-binutils-goldUpgrade binutils-goldUpgrade gcc-toolset-15-binutilsUpgrade binutils-develUpgrade gcc-toolset-14-binutils-devel | Dec 22, 2025 | Sep 27, 2025 |
| Redhat Openshift | — | Upgrade rhcos | Aug 10, 2026 | Sep 27, 2025 |
| Redhat_linux | — | Upgrade cross-binutils-ppc64le-debuginfoUpgrade binutils-gprofng-debuginfoUpgrade binutils-develUpgrade binutils-goldUpgrade gcc-toolset-14-binutils-develUpgrade binutils-debugsourceUpgrade binutils-gold-debuginfoUpgrade gcc-toolset-15-binutils-gold-debuginfoUpgrade gcc-toolset-15-binutils-goldUpgrade gcc-toolset-14-binutils-goldUpgrade gcc-toolset-14-binutils-gold-debuginfoUpgrade gcc-toolset-14-binutils-debuginfoUpgrade cross-binutils-aarch64-debuginfoUpgrade gcc-toolset-15-binutilsUpgrade gcc-toolset-13-binutilsUpgrade gcc-toolset-13-binutils-gold-debuginfoUpgrade gcc-toolset-15-binutils-gprofng-debuginfoUpgrade cross-binutils-s390x-debuginfoUpgrade gcc-toolset-13-binutils-gprofng-debuginfoUpgrade gcc-toolset-14-binutilsUpgrade gcc-toolset-15-binutils-gprofngUpgrade gcc-toolset-15-binutils-develUpgrade gcc-toolset-13-binutils-develUpgrade binutils-debuginfoUpgrade gcc-toolset-13-binutils-goldUpgrade binutilsUpgrade gcc-toolset-14-binutils-gprofngUpgrade gcc-toolset-13-binutils-debuginfoNo solution existsUpgrade gcc-toolset-15-binutils-debuginfoUpgrade gcc-toolset-14-binutils-gprofng-debuginfo | Dec 19, 2025 | Sep 27, 2025 |
| Rocky_linux | — | Upgrade binutils-develUpgrade gcc-toolset-14-binutils-goldUpgrade binutils-gold-debuginfoUpgrade gcc-toolset-14-binutils-develUpgrade gcc-toolset-15-binutils-goldUpgrade gcc-toolset-13-binutils-gold-debuginfoUpgrade gcc-toolset-15-binutils-gold-debuginfoUpgrade gcc-toolset-15-binutils-gprofngUpgrade binutils-debugsourceUpgrade binutils-debuginfoUpgrade gcc-toolset-14-binutils-gold-debuginfoUpgrade binutils-goldUpgrade gcc-toolset-14-binutils-gprofngUpgrade gcc-toolset-15-binutilsUpgrade gcc-toolset-14-binutils-gprofng-debuginfoUpgrade gcc-toolset-13-binutils-debuginfoUpgrade gcc-toolset-15-binutils-develUpgrade gcc-toolset-13-binutilsUpgrade binutilsUpgrade gcc-toolset-13-binutils-goldUpgrade gcc-toolset-14-binutils-debuginfoUpgrade gcc-toolset-13-binutils-develUpgrade gcc-toolset-15-binutils-debuginfoUpgrade gcc-toolset-15-binutils-gprofng-debuginfoUpgrade gcc-toolset-14-binutils | Jan 7, 2026 | Jan 6, 2026 |
| Ubuntu | — | Upgrade binutils-multiarchUpgrade binutils | Oct 30, 2025 | Oct 29, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub