VulnSocial

CVE-2025-11081Patch(gnu / binutils)

LOWCVSS 5.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch gnu binutils systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was detected in GNU Binutils 2.45. This issue affects the function dump_dwarf_section of the file binutils/objdump.c. Performing manipulation results in out-of-bounds read. The attack is only possible with local access. The exploit is now public and may be used. The patch is named f87a66db645caf8cc0e6fc87b0c28c78a38af59b. It is suggested to install a patch to address this issue.

gnu CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Patch / fix
Exploit / PoC references
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-119CWE-125

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • binutils

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
gnu
Products
binutils

1 version affected across 1 product

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-03-04: 1Patch / Workaround · 2026-03-04: 1Technical Details · 2026-03-04: 103-04
Signal classification1 categories
Patch
1100.0%
Referenced assets1 URL
Full discourse1 post
  • ThreatCluster@threatcluster
    Patch

    Fedora 42 and 43 release avr-binutils updates fixing heap overflow flaws CVE-2025-11081, CVE-2025-11082, CVE-2025-11083 that risk out-of-bounds reads and memory corruption. Update now. https://threatcluster.io/cluster/fedora-42-and-43-address-severe-heap-overflow-vulnerabilitie-83fdeedc

    Post summary

    Fedora 42 and 43 have released avr‑binutils updates that fix three heap‑overflow CVEs, advising users to update to mitigate out‑of‑bounds read and memory corruption risks.

    0000069
    89 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appgnubinutils2.45--

Explore more

Back to dashboardgnu CVEsbinutils vulnerabilities