Medium severity5.3NVD Advisory· Published Sep 27, 2025· Updated May 12, 2026

CVE-2025-11083

Description

A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elf_swap_shdr in the library bfd/elfcode.h of the component Linker. The manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit has been disclosed to the public and may be used. The identifier of the patch is 9ca499644a21ceb3f946d1c179c38a83be084490. To fix this issue, it is recommended to deploy a patch. The code maintainer replied with "[f]ixed for 2.46".

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

134

GNU/Binutils2 versions
cpe:2.3:a:gnu:binutils:2.45:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:gnu:binutils:2.45:*:*:*:*:*:*:*
- (no CPE)range: =2.45
osv-coords132 versions
pkg:apk/chainguard/binutils pkg:apk/chainguard/binutils-dev pkg:apk/chainguard/binutils-doc pkg:apk/chainguard/binutils-gold pkg:apk/wolfi/binutils pkg:apk/wolfi/binutils-dev pkg:apk/wolfi/binutils-doc pkg:apk/wolfi/binutils-gold pkg:rpm/almalinux/binutils pkg:rpm/almalinux/binutils-devel pkg:rpm/almalinux/binutils-gold pkg:rpm/almalinux/gcc-toolset-13-binutils pkg:rpm/almalinux/gcc-toolset-13-binutils-devel pkg:rpm/almalinux/gcc-toolset-13-binutils-gold pkg:rpm/almalinux/gcc-toolset-14-binutils pkg:rpm/almalinux/gcc-toolset-14-binutils-devel pkg:rpm/almalinux/gcc-toolset-14-binutils-gold pkg:rpm/almalinux/gcc-toolset-14-binutils-gprofng pkg:rpm/almalinux/gcc-toolset-15-binutils pkg:rpm/almalinux/gcc-toolset-15-binutils-devel pkg:rpm/almalinux/gcc-toolset-15-binutils-gold pkg:rpm/almalinux/gcc-toolset-15-binutils-gprofng pkg:rpm/opensuse/binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/binutils&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/bpftool&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-aarch64-binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cross-aarch64-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-arm-binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cross-arm-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-avr-binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cross-avr-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-bpf-binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cross-bpf-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-epiphany-binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cross-epiphany-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-hppa64-binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cross-hppa64-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-hppa-binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cross-hppa-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-i386-binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cross-i386-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-ia64-binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cross-ia64-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-loongarch64-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-m68k-binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cross-m68k-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-mips-binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cross-mips-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-ppc64-binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cross-ppc64-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-ppc64le-binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cross-ppc64le-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-ppc-binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cross-ppc-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-pru-binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cross-pru-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-riscv64-binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cross-riscv64-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-rx-binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cross-rx-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-s390-binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cross-s390-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-s390x-binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cross-s390x-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-sparc64-binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cross-sparc64-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-sparc-binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cross-sparc-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-spu-binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cross-spu-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-x86_64-binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cross-x86_64-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-xtensa-binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cross-xtensa-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/openucx&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/perf&distro=openSUSE%20Leap%2015.6 pkg:rpm/suse/binutils&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/binutils&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/binutils&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS pkg:rpm/suse/binutils&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS pkg:rpm/suse/binutils&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOS pkg:rpm/suse/binutils&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSS pkg:rpm/suse/binutils&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6 pkg:rpm/suse/binutils&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP7 pkg:rpm/suse/binutils&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP6 pkg:rpm/suse/binutils&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP7 pkg:rpm/suse/binutils&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP6 pkg:rpm/suse/binutils&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP7 pkg:rpm/suse/binutils&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/binutils&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS pkg:rpm/suse/binutils&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS pkg:rpm/suse/binutils&distro=SUSE%20Linux%20Enterprise%20Server%2016.0 pkg:rpm/suse/binutils&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/binutils&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4 pkg:rpm/suse/binutils&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5 pkg:rpm/suse/binutils&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0 pkg:rpm/suse/binutils&distro=SUSE%20Linux%20Micro%206.2 pkg:rpm/suse/binutils&distro=SUSE%20Manager%20Proxy%20LTS%204.3 pkg:rpm/suse/binutils&distro=SUSE%20Manager%20Server%20LTS%204.3 pkg:rpm/suse/bpftool&distro=SUSE%20Linux%20Enterprise%20Server%2016.0 pkg:rpm/suse/bpftool&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0 pkg:rpm/suse/openucx&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/openucx&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/openucx&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS pkg:rpm/suse/openucx&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS pkg:rpm/suse/openucx&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOS pkg:rpm/suse/openucx&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSS pkg:rpm/suse/openucx&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6 pkg:rpm/suse/openucx&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP7 pkg:rpm/suse/openucx&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/openucx&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS pkg:rpm/suse/openucx&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS pkg:rpm/suse/openucx&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/openucx&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4 pkg:rpm/suse/openucx&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5 pkg:rpm/suse/openucx&distro=SUSE%20Manager%20Proxy%20LTS%204.3 pkg:rpm/suse/openucx&distro=SUSE%20Manager%20Server%20LTS%204.3 pkg:rpm/suse/perf&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/perf&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/perf&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS pkg:rpm/suse/perf&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS pkg:rpm/suse/perf&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOS pkg:rpm/suse/perf&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSS pkg:rpm/suse/perf&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP6 pkg:rpm/suse/perf&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP7 pkg:rpm/suse/perf&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/perf&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS pkg:rpm/suse/perf&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS pkg:rpm/suse/perf&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/perf&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4 pkg:rpm/suse/perf&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5
< 2.45.1-r1+ 131 more
- (no CPE)range: < 2.45.1-r1
- (no CPE)range: < 2.45.1-r1
- (no CPE)range: < 2.45.1-r1
- (no CPE)range: < 2.45.1-r1
- (no CPE)range: < 2.45.1-r1
- (no CPE)range: < 2.45.1-r1
- (no CPE)range: < 2.45.1-r1
- (no CPE)range: < 2.45.1-r1
- (no CPE)range: < 2.41-58.el10_1.2.alma.1
- (no CPE)range: < 2.41-58.el10_1.2.alma.1
- (no CPE)range: < 2.41-58.el10_1.2.alma.1
- (no CPE)range: < 2.40-21.el9_7.1
- (no CPE)range: < 2.40-21.el9_7.1
- (no CPE)range: < 2.40-21.el9_7.1
- (no CPE)range: < 2.41-5.el9_7.1
- (no CPE)range: < 2.41-5.el9_7.1
- (no CPE)range: < 2.41-5.el9_7.1
- (no CPE)range: < 2.41-5.el9_7.1
- (no CPE)range: < 2.44-7.el10_1.1
- (no CPE)range: < 2.44-7.el10_1.1
- (no CPE)range: < 2.44-7.el10_1.1
- (no CPE)range: < 2.44-7.el10_1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-1.2
- (no CPE)range: < 7.5.0-160000.2.3
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 1.15.0-150600.3.5.2
- (no CPE)range: < 6.4.0.git33229.a3afe13a7f-150600.3.17.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 7.5.0-160000.2.3
- (no CPE)range: < 7.5.0-160000.2.3
- (no CPE)range: < 1.9.0-150300.4.2.5
- (no CPE)range: < 1.9.0-150300.4.2.5
- (no CPE)range: < 1.11.1-150400.4.2.1
- (no CPE)range: < 1.11.1-150400.4.2.1
- (no CPE)range: < 1.13.1-150500.4.2.5
- (no CPE)range: < 1.13.1-150500.4.2.5
- (no CPE)range: < 1.15.0-150600.3.5.2
- (no CPE)range: < 1.17.0-150700.4.2.7
- (no CPE)range: < 1.9.0-150300.4.2.5
- (no CPE)range: < 1.11.1-150400.4.2.1
- (no CPE)range: < 1.13.1-150500.4.2.5
- (no CPE)range: < 1.9.0-150300.4.2.5
- (no CPE)range: < 1.11.1-150400.4.2.1
- (no CPE)range: < 1.13.1-150500.4.2.5
- (no CPE)range: < 1.11.1-150400.4.2.1
- (no CPE)range: < 1.11.1-150400.4.2.1
- (no CPE)range: < 5.3.18-150300.38.7.1
- (no CPE)range: < 5.3.18-150300.38.7.1
- (no CPE)range: < 5.14.21-150400.44.20.1
- (no CPE)range: < 5.14.21-150400.44.20.1
- (no CPE)range: < 5.14.21-150500.52.5.1
- (no CPE)range: < 5.14.21-150500.52.5.1
- (no CPE)range: < 6.4.0.git33229.a3afe13a7f-150600.3.17.1
- (no CPE)range: < 6.4.0.git54263.0aad576b1c-150700.3.2.2
- (no CPE)range: < 5.3.18-150300.38.7.1
- (no CPE)range: < 5.14.21-150400.44.20.1
- (no CPE)range: < 5.14.21-150500.52.5.1
- (no CPE)range: < 5.3.18-150300.38.7.1
- (no CPE)range: < 5.14.21-150400.44.20.1
- (no CPE)range: < 5.14.21-150500.52.5.1

Patches

Vulnerability mechanics

References

sourceware.org/bugzilla/show_bug.cginvdExploitIssue Tracking
sourceware.org/bugzilla/show_bug.cginvdExploitIssue Tracking
vuldb.comnvdThird Party AdvisoryVDB Entry
vuldb.comnvdThird Party AdvisoryVDB Entry
sourceware.org/bugzilla/attachment.cginvdBroken Link
vuldb.comnvdPermissions RequiredVDB Entry
www.gnu.orgnvdProduct
cert-portal.siemens.com/productcert/html/ssa-082556.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000