4.8
Medium
CVE-2025-11414 A vulnerability was determined in GNU Binutils 2.45
Description
A vulnerability was determined in GNU Binutils 2.45. Affected by this vulnerability is the function get_link_hash_entry of the file bfd/elflink.c of the component Linker. This manipulation causes out-of-bounds read. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Upgrading to version 2.46 addresses this issue. Patch name: aeaaa9af6359c8e394ce9cf24911fec4f4d23703. It is advisable to upgrade the affected component.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Binutils 2.46 | earliest → < 2.46 | 2.46 |
| Binutils | 2.45 | No fix stated |
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.5 → latest | No fix stated |
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 | 3.1.5 → latest | No fix stated |
| SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.5 → latest | No fix stated |
Other CVEs of Binutils
The 43 CVEs of Binutils →
CVE-2026-91782
A vulnerability was detected in GNU Binutils 2.47
4.8
Medium
CVE-2026-91781
A security vulnerability has been detected in GNU Binutils 2.47
4.8
Medium
CVE-2026-91780
A weakness has been identified in GNU Binutils 2.47
4.8
Medium
CVE-2026-91779
A security flaw has been discovered in GNU Binutils 2.47
4.8
Medium