Name: CVE-2025-11082: Heap-based Buffer Overflow
Creator: Rapid7
Published: 2025-09-27T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2025-11082, CWE-122, CWE-119, CVSS 5.3, EPSS 0.00023

A flaw has been found in GNU Binutils 2.45. Impacted is the function _bfd_elf_parse_eh_frame of the file bfd/elf-eh-frame.c of the component Linker. Executing manipulation can lead to heap-based buffer overflow. The attack is restricted to local execution. The exploit has been published and may be used. This patch is called ea1a0737c7692737a644af0486b71e4a392cbca8. A patch should be applied to remediate this issue. The code maintainer replied with "[f]ixed for 2.46".

CVSS Details

CVSS 4.0 Base Score: 1.9 (LOW)
CVSS 4.0 Vector: (CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
CVSS 3.1 Base Score: 5.3
CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C)
CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Huawei Euleros 2_0_sp10	—	Upgrade gdb-helpUpgrade gdb-headlessUpgrade gdb	Mar 17, 2026	Mar 16, 2026
Huawei Euleros 2_0_sp12	—	Upgrade gdbUpgrade gdb-headlessUpgrade gdb-help	Mar 17, 2026	Mar 16, 2026
Huawei Euleros 2_0_sp13	—	Upgrade gdb-helpUpgrade gdb-headlessUpgrade gdb	Mar 10, 2026	Mar 10, 2026
Oracle_linux	—	Upgrade binutils-gprofngUpgrade binutils-goldUpgrade binutilsUpgrade binutils-devel	Dec 22, 2025	Sep 27, 2025
Redhat_linux	—	Upgrade binutilsUpgrade cross-binutils-s390x-debuginfoUpgrade cross-binutils-ppc64le-debuginfoUpgrade cross-binutils-aarch64-debuginfoUpgrade binutils-develUpgrade binutils-gold-debuginfoNo solution existsUpgrade binutils-debugsourceUpgrade binutils-gprofng-debuginfoUpgrade binutils-debuginfoUpgrade binutils-gold	Dec 19, 2025	Sep 27, 2025
Rocky_linux	—	Upgrade binutils-develUpgrade binutils-debugsourceUpgrade binutils-goldUpgrade binutils-debuginfoUpgrade binutilsUpgrade binutils-gold-debuginfo	Feb 5, 2026	Dec 20, 2025
Ubuntu	—	Upgrade binutils-multiarch (Ubuntu Pro)Upgrade binutils-multiarchUpgrade binutils (Ubuntu Pro)Upgrade binutils	Oct 30, 2025	Oct 29, 2025

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence