4.8
Medium
CVE-2025-11413 A vulnerability was found in GNU Binutils 2.45
Description
A vulnerability was found in GNU Binutils 2.45. Affected is the function elf_link_add_object_symbols of the file bfd/elflink.c of the component Linker. The manipulation results in out-of-bounds read. The attack needs to be approached locally. The exploit has been made public and could be used. Upgrading to version 2.46 is able to address this issue. The patch is identified as 72efdf166aa0ed72ecc69fc2349af6591a7a19c0. Upgrading the affected component is advised.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Binutils 2.46 | earliest → < 2.46 | 2.46 |
| Binutils | 2.45 | No fix stated |
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.5 → latest | No fix stated |
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 | 3.1.5 → latest | No fix stated |
| SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.5 → latest | No fix stated |
Other CVEs of Binutils
The 43 CVEs of Binutils →
CVE-2026-91782
A vulnerability was detected in GNU Binutils 2.47
4.8
Medium
CVE-2026-91781
A security vulnerability has been detected in GNU Binutils 2.47
4.8
Medium
CVE-2026-91780
A weakness has been identified in GNU Binutils 2.47
4.8
Medium
CVE-2026-91779
A security flaw has been discovered in GNU Binutils 2.47
4.8
Medium