CVE-2025-11083 | GNU Binutils 2.45 Linker bfd/elfcode.h elf_swap_shdr heap-based overflow (Bug 33457)

September 26, 2025 Yanac

A vulnerability was found in GNU Binutils 2.45. It has been rated as critical. The affected element is the function elf_swap_shdr in the library bfd/elfcode.h of the component Linker. The manipulation leads to heap-based buffer overflow.

This vulnerability is listed as CVE-2025-11083. The attack must be carried out locally. In addition, an exploit is available.

To fix this issue, it is recommended to deploy a patch.

The code maintainer replied with “[f]ixed for 2.46”.VulDB Recent EntriesRead More