A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elf_swap_shdr in the library bfd/elfcode.h of the component Linker. The manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit has been disclosed to the public and may be used. The identifier of the patch is 9ca499644a21ceb3f946d1c179c38a83be084490. To fix this issue, it is recommended to deploy a patch. The code maintainer replied with "[f]ixed for 2.46".
CVSS Details
- CVSS 4.0 Base Score: 1.9 (LOW)
- CVSS 4.0 Vector: (CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gcc-toolset-13-binutils-develUpgrade gcc-toolset-13-binutils-goldUpgrade binutilsUpgrade gcc-toolset-15-binutils-develUpgrade gcc-toolset-15-binutils-gprofngUpgrade gcc-toolset-14-binutilsUpgrade binutils-develUpgrade gcc-toolset-14-binutils-gprofngUpgrade gcc-toolset-13-binutilsUpgrade gcc-toolset-15-binutilsUpgrade gcc-toolset-14-binutils-develUpgrade binutils-goldUpgrade gcc-toolset-15-binutils-goldUpgrade gcc-toolset-14-binutils-gold | Dec 23, 2025 | Dec 16, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade gdb-helpUpgrade gdb-headlessUpgrade gdb | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade gdb-headlessUpgrade gdbUpgrade gdb-help | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade gdb-helpUpgrade gdb-headlessUpgrade gdb | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade gdb-helpUpgrade gdbUpgrade gdb-headless | Mar 10, 2026 | Mar 10, 2026 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Mar 26, 2026 |
| Oracle_linux | — | Upgrade gcc-toolset-13-binutils-goldUpgrade binutilsUpgrade gcc-toolset-14-binutils-gprofngUpgrade gcc-toolset-15-binutils-goldUpgrade gcc-toolset-15-binutils-develUpgrade binutils-gprofngUpgrade gcc-toolset-14-binutilsUpgrade gcc-toolset-13-binutils-develUpgrade binutils-goldUpgrade gcc-toolset-14-binutils-develUpgrade gcc-toolset-13-binutilsUpgrade gcc-toolset-14-binutils-goldUpgrade binutils-develUpgrade gcc-toolset-15-binutils-gprofngUpgrade gcc-toolset-15-binutils | Dec 22, 2025 | Sep 27, 2025 |
| Redhat Openshift | — | Upgrade rhcos | Aug 10, 2026 | Sep 27, 2025 |
| Redhat_linux | — | Upgrade binutils-debugsourceUpgrade gcc-toolset-15-binutils-gold-debuginfoUpgrade gcc-toolset-13-binutilsUpgrade gcc-toolset-15-binutils-goldUpgrade gcc-toolset-14-binutils-gold-debuginfoUpgrade gcc-toolset-13-binutils-gold-debuginfoUpgrade binutils-gold-debuginfoUpgrade gcc-toolset-14-binutils-develUpgrade binutils-develUpgrade binutils-goldUpgrade gcc-toolset-14-binutils-debuginfoUpgrade gcc-toolset-15-binutilsUpgrade cross-binutils-aarch64-debuginfoUpgrade gcc-toolset-14-binutils-goldUpgrade binutils-gprofng-debuginfoUpgrade cross-binutils-ppc64le-debuginfoUpgrade gcc-toolset-13-binutils-gprofng-debuginfoUpgrade gcc-toolset-13-binutils-debuginfoUpgrade gcc-toolset-15-binutils-gprofng-debuginfoUpgrade binutilsUpgrade gcc-toolset-15-binutils-gprofngUpgrade gcc-toolset-14-binutilsUpgrade binutils-debuginfoUpgrade gcc-toolset-13-binutils-goldUpgrade gcc-toolset-15-binutils-develUpgrade gcc-toolset-14-binutils-gprofngNo solution existsUpgrade gcc-toolset-13-binutils-develUpgrade cross-binutils-s390x-debuginfoUpgrade gcc-toolset-15-binutils-debuginfoUpgrade gcc-toolset-14-binutils-gprofng-debuginfo | Dec 19, 2025 | Sep 27, 2025 |
| Rocky_linux | — | Upgrade gcc-toolset-13-binutils-develUpgrade gcc-toolset-14-binutils-debuginfoUpgrade gcc-toolset-14-binutils-gprofngUpgrade gcc-toolset-15-binutils-gprofng-debuginfoUpgrade gcc-toolset-13-binutils-goldUpgrade gcc-toolset-15-binutils-develUpgrade gcc-toolset-14-binutils-gprofng-debuginfoUpgrade gcc-toolset-15-binutils-debuginfoUpgrade gcc-toolset-13-binutils-debuginfoUpgrade binutilsUpgrade gcc-toolset-13-binutilsUpgrade gcc-toolset-15-binutilsUpgrade gcc-toolset-14-binutilsUpgrade binutils-debuginfoUpgrade gcc-toolset-14-binutils-develUpgrade binutils-develUpgrade binutils-goldUpgrade gcc-toolset-15-binutils-gprofngUpgrade binutils-debugsourceUpgrade binutils-gold-debuginfoUpgrade gcc-toolset-14-binutils-gold-debuginfoUpgrade gcc-toolset-15-binutils-gold-debuginfoUpgrade gcc-toolset-13-binutils-gold-debuginfoUpgrade gcc-toolset-15-binutils-goldUpgrade gcc-toolset-14-binutils-gold | Jan 7, 2026 | Jan 6, 2026 |
| Ubuntu | — | Upgrade binutils-multiarchUpgrade binutils | Oct 30, 2025 | Oct 29, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub