A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elf_swap_shdr in the library bfd/elfcode.h of the component Linker. The manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit has been disclosed to the public and may be used. The identifier of the patch is 9ca499644a21ceb3f946d1c179c38a83be084490. To fix this issue, it is recommended to deploy a patch. The code maintainer replied with "[f]ixed for 2.46".
CVSS Details
- CVSS 4.0 Base Score: 1.9 (LOW)
- CVSS 4.0 Vector: (CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade binutilsUpgrade gcc-toolset-14-binutilsUpgrade gcc-toolset-13-binutils-develUpgrade gcc-toolset-15-binutils-develUpgrade gcc-toolset-15-binutils-gprofngUpgrade gcc-toolset-13-binutils-goldUpgrade gcc-toolset-15-binutilsUpgrade gcc-toolset-14-binutils-goldUpgrade binutils-goldUpgrade gcc-toolset-13-binutilsUpgrade gcc-toolset-14-binutils-gprofngUpgrade binutils-develUpgrade gcc-toolset-14-binutils-develUpgrade gcc-toolset-15-binutils-gold | Dec 23, 2025 | Dec 16, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade gdbUpgrade gdb-helpUpgrade gdb-headless | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade gdb-headlessUpgrade gdbUpgrade gdb-help | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade gdb-headlessUpgrade gdb-helpUpgrade gdb | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade gdb-headlessUpgrade gdbUpgrade gdb-help | Mar 10, 2026 | Mar 10, 2026 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Mar 26, 2026 |
| Oracle_linux | — | Upgrade gcc-toolset-15-binutils-gprofngUpgrade gcc-toolset-14-binutils-goldUpgrade gcc-toolset-13-binutilsUpgrade gcc-toolset-15-binutilsUpgrade binutils-goldUpgrade binutils-develUpgrade gcc-toolset-14-binutils-develUpgrade gcc-toolset-14-binutils-gprofngUpgrade binutilsUpgrade binutils-gprofngUpgrade gcc-toolset-15-binutils-goldUpgrade gcc-toolset-13-binutils-goldUpgrade gcc-toolset-14-binutilsUpgrade gcc-toolset-13-binutils-develUpgrade gcc-toolset-15-binutils-devel | Dec 22, 2025 | Sep 27, 2025 |
| Redhat Openshift | — | Upgrade rhcos | Aug 10, 2026 | Sep 27, 2025 |
| Redhat_linux | — | Upgrade gcc-toolset-15-binutils-develUpgrade gcc-toolset-14-binutilsUpgrade gcc-toolset-15-binutils-gprofng-debuginfoUpgrade gcc-toolset-13-binutils-develUpgrade gcc-toolset-15-binutils-debuginfoUpgrade gcc-toolset-14-binutils-gprofng-debuginfoUpgrade cross-binutils-s390x-debuginfoUpgrade gcc-toolset-14-binutils-gprofngUpgrade binutilsUpgrade gcc-toolset-13-binutils-gprofng-debuginfoNo solution existsUpgrade binutils-debuginfoUpgrade gcc-toolset-13-binutils-debuginfoUpgrade gcc-toolset-13-binutils-goldUpgrade gcc-toolset-15-binutils-gprofngUpgrade cross-binutils-aarch64-debuginfoUpgrade cross-binutils-ppc64le-debuginfoUpgrade gcc-toolset-14-binutils-gold-debuginfoUpgrade gcc-toolset-14-binutils-debuginfoUpgrade gcc-toolset-14-binutils-goldUpgrade binutils-gprofng-debuginfoUpgrade binutils-goldUpgrade gcc-toolset-14-binutils-develUpgrade binutils-develUpgrade gcc-toolset-15-binutils-goldUpgrade binutils-gold-debuginfoUpgrade gcc-toolset-13-binutilsUpgrade binutils-debugsourceUpgrade gcc-toolset-13-binutils-gold-debuginfoUpgrade gcc-toolset-15-binutils-gold-debuginfoUpgrade gcc-toolset-15-binutils | Dec 19, 2025 | Sep 27, 2025 |
| Rocky_linux | — | Upgrade gcc-toolset-15-binutilsUpgrade gcc-toolset-14-binutils-gprofng-debuginfoUpgrade gcc-toolset-14-binutils-gprofngUpgrade gcc-toolset-13-binutils-develUpgrade gcc-toolset-13-binutils-goldUpgrade gcc-toolset-15-binutils-debuginfoUpgrade gcc-toolset-14-binutilsUpgrade gcc-toolset-15-binutils-gprofng-debuginfoUpgrade binutilsUpgrade gcc-toolset-14-binutils-debuginfoUpgrade gcc-toolset-13-binutils-debuginfoUpgrade gcc-toolset-15-binutils-develUpgrade gcc-toolset-13-binutilsUpgrade gcc-toolset-15-binutils-gprofngUpgrade gcc-toolset-13-binutils-gold-debuginfoUpgrade binutils-goldUpgrade gcc-toolset-15-binutils-gold-debuginfoUpgrade binutils-develUpgrade gcc-toolset-14-binutils-gold-debuginfoUpgrade gcc-toolset-14-binutils-goldUpgrade gcc-toolset-14-binutils-develUpgrade binutils-debuginfoUpgrade gcc-toolset-15-binutils-goldUpgrade binutils-debugsourceUpgrade binutils-gold-debuginfo | Jan 7, 2026 | Jan 6, 2026 |
| Ubuntu | — | Upgrade binutilsUpgrade binutils-multiarch | Oct 30, 2025 | Oct 29, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub