TI-2025-10150 Aliases CVE-2025-11082 GHSA-4whc-3xqp-jprr

GNU Binutils Linker elf-eh-frame.c _bfd_elf_parse_eh_frame heap-based overflow

LOW 22CWE-119Published 2025-09-27 · Updated 2026-10-15

Key facts

Attack vector: Local
Privileges required: Low
User interaction: None
Attack complexity: Low
Attack requirements: None
Impact type: —
Confidentiality · integrity · availability: Low · Low · Low
Fix status: Partial Red Hat: 5 fixed, 9 without a fix

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and Red Hat.

Summary

A flaw has been found in GNU Binutils 2.45. Impacted is the function _bfd_elf_parse_eh_frame of the file bfd/elf-eh-frame.c of the component Linker. Executing manipulation can lead to heap-based buffer overflow. The attack is restricted to local execution. The exploit has been published and may be used. This patch is called ea1a0737c7692737a644af0486b71e4a392cbca8. A patch should be applied to remediate this issue. The code maintainer replied with "[f]ixed for 2.46".

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.0026 17th percentileScored 2026-11-07

Public exploit Yes 3 exploit referencesTagged by NVD and the CNA

Fix Partial Red Hat: 4 advisoriesRed Hat: 5 fixed, 9 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
GNU	Binutils	2.45	—	No fix listed	CNA

Binutils VendorGNU Affected 2.45 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:gnu:binutils:2.45:::::::*	2.45	Vulnerable	GNU

cpe:2.3:a:gnu:binutils:2.45:*:*:*:*:*:*:* Versions 2.45 Vulnerable ·GNU

Remediation

Red Hat 4 advisories

RHSA-2026:39022 Released 2026-07-13 · Red Hat rating Important
Red Hat Hardened Images RPMs Security Update
- Red Hat Hardened Images binutils-2.46.1-1.hum1@aarch64, binutils-2.46.1-1.hum1@src, binutils-2.46.1-1.hum1@x86_64 +6
RHSA-2026:7098 Released 2026-04-08 · Red Hat rating Moderate
Red Hat Hardened Images RPMs bug fix and enhancement update
- Red Hat Hardened Images binutils-2.45.1-5.hum1@aarch64, binutils-2.45.1-5.hum1@src, binutils-2.45.1-5.hum1@x86_64 +6
RHSA-2025:23306 Released 2025-12-18 · Red Hat rating Moderate
binutils security update
- Red Hat Enterprise Linux AppStream (v. 10) binutils-devel-2.41-58.el10_1.2
- Red Hat Enterprise Linux BaseOS (v. 10) binutils-2.41-58.el10_1.2, binutils-gold-2.41-58.el10_1.2

Show 1 more Red Hat advisories

RHSA-2025:23405 Released 2025-12-18 · Red Hat rating Moderate
binutils security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) binutils-devel-2.41-53.el10_0.2
- Red Hat Enterprise Linux BaseOS EUS (v. 10.0) binutils-2.41-53.el10_0.2, binutils-gold-2.41-53.el10_0.2

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

Product	Status	Plan or fix
Migration Toolkit for Containers	Affected	No fix yet: Fix deferred
Migration Toolkit for Virtualization	Affected	No fix yet: Fix deferred
Red Hat Enterprise Linux 10	Affected	No fix yet: Fix deferred
Red Hat Enterprise Linux 6	Affected	No fix yet: Fix deferred
Red Hat Enterprise Linux 7	Affected	No fix yet: Fix deferred
Red Hat Enterprise Linux 8	Affected	No fix yet: Fix deferred
Red Hat Enterprise Linux 9	Affected	No fix yet
Red Hat OpenShift AI (RHOAI)	Affected	—
Red Hat OpenShift Container Platform 4	Affected	No fix yet
Red Hat Enterprise Linux AppStream (v. 10)	Fixed	RHSA-2025:23306
Red Hat Enterprise Linux AppStream EUS (v. 10.0)	Fixed	RHSA-2025:23405
Red Hat Enterprise Linux BaseOS (v. 10)	Fixed	RHSA-2025:23306
Red Hat Enterprise Linux BaseOS EUS (v. 10.0)	Fixed	RHSA-2025:23405
Red Hat Hardened Images	Fixed	RHSA-2026:39022, RHSA-2026:7098

Not affected: 3 products

Red Hat Enterprise Linux 10
Red Hat Enterprise Linux 8
Red Hat OpenShift Container Platform 4

Timeline

2026-10-02 Threatist record created from CVE-2025-11082
2026-10-03 Alias added: GHSA-4whc-3xqp-jprr
2026-10-16 Affected versions changed · Red Hat
2026-11-06 Affected versions changed · Red Hat

References

Exploit 3

Patch 1

https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ea1a0737c7692737a644af0486b71e4a392cbca8

Other 1

https://www.gnu.org/

TI-2020-13695 An issue was discovered in binutils libbfd.c 2.36 relating to the auxiliary symbol data… CVSS 3.1HIGH 8.8
TI-2025-42907 GNU Binutils thru 2.46 readelf contains a double free vulnerability when processing a… CVSS 3.1HIGH 7.5
TI-2025-41071 An issue was discovered in function d_print_comp_inner in file cp-demangle.c in BinUtils… CVSS 3.1HIGH 7.5
TI-2025-41069 An issue was discovered in function d_discriminator in file cp-demangle.c in BinUtils… CVSS 3.1HIGH 7.5
TI-2025-41068 A buffer overflow vulnerability in function gnu_special in file cplus-dem.c in BinUtils… CVSS 3.1HIGH 7.5
TI-2021-21105 Heap-based Buffer Overflow in function bfd_getl32 in Binutils objdump 3.37. CVSS 3.1HIGH 7.5

See all 287 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences