Low severity3.3NVD Advisory· Published Oct 7, 2025· Updated May 12, 2026

CVE-2025-11412

Description

A vulnerability has been found in GNU Binutils 2.45. This impacts the function bfd_elf_gc_record_vtentry of the file bfd/elflink.c of the component Linker. The manipulation leads to out-of-bounds read. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier of the patch is 047435dd988a3975d40c6626a8f739a0b2e154bc. To fix this issue, it is recommended to deploy a patch.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

120

GNU/Binutils2 versions
cpe:2.3:a:gnu:binutils:2.45:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:gnu:binutils:2.45:*:*:*:*:*:*:*
- (no CPE)range: = 2.45
osv-coords118 versions
pkg:apk/chainguard/binutils pkg:apk/chainguard/binutils-dev pkg:apk/chainguard/binutils-doc pkg:apk/chainguard/binutils-gold pkg:apk/wolfi/binutils pkg:apk/wolfi/binutils-dev pkg:apk/wolfi/binutils-doc pkg:apk/wolfi/binutils-gold pkg:rpm/opensuse/binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/binutils&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/bpftool&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-aarch64-binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cross-aarch64-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-arm-binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cross-arm-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-avr-binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cross-avr-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-bpf-binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cross-bpf-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-epiphany-binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cross-epiphany-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-hppa64-binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cross-hppa64-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-hppa-binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cross-hppa-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-i386-binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cross-i386-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-ia64-binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cross-ia64-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-loongarch64-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-m68k-binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cross-m68k-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-mips-binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cross-mips-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-ppc64-binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cross-ppc64-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-ppc64le-binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cross-ppc64le-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-ppc-binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cross-ppc-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-pru-binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cross-pru-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-riscv64-binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cross-riscv64-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-rx-binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cross-rx-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-s390-binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cross-s390-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-s390x-binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cross-s390x-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-sparc64-binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cross-sparc64-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-sparc-binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cross-sparc-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-spu-binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cross-spu-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-x86_64-binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cross-x86_64-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/cross-xtensa-binutils&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/cross-xtensa-binutils&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/openucx&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/perf&distro=openSUSE%20Leap%2015.6 pkg:rpm/suse/binutils&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/binutils&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/binutils&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS pkg:rpm/suse/binutils&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS pkg:rpm/suse/binutils&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOS pkg:rpm/suse/binutils&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSS pkg:rpm/suse/binutils&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6 pkg:rpm/suse/binutils&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP7 pkg:rpm/suse/binutils&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP6 pkg:rpm/suse/binutils&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP7 pkg:rpm/suse/binutils&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP6 pkg:rpm/suse/binutils&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP7 pkg:rpm/suse/binutils&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/binutils&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS pkg:rpm/suse/binutils&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS pkg:rpm/suse/binutils&distro=SUSE%20Linux%20Enterprise%20Server%2016.0 pkg:rpm/suse/binutils&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/binutils&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4 pkg:rpm/suse/binutils&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5 pkg:rpm/suse/binutils&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0 pkg:rpm/suse/binutils&distro=SUSE%20Linux%20Micro%206.2 pkg:rpm/suse/binutils&distro=SUSE%20Manager%20Proxy%20LTS%204.3 pkg:rpm/suse/binutils&distro=SUSE%20Manager%20Server%20LTS%204.3 pkg:rpm/suse/bpftool&distro=SUSE%20Linux%20Enterprise%20Server%2016.0 pkg:rpm/suse/bpftool&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0 pkg:rpm/suse/openucx&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/openucx&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/openucx&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS pkg:rpm/suse/openucx&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS pkg:rpm/suse/openucx&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOS pkg:rpm/suse/openucx&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSS pkg:rpm/suse/openucx&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6 pkg:rpm/suse/openucx&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP7 pkg:rpm/suse/openucx&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/openucx&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS pkg:rpm/suse/openucx&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS pkg:rpm/suse/openucx&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/openucx&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4 pkg:rpm/suse/openucx&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5 pkg:rpm/suse/openucx&distro=SUSE%20Manager%20Proxy%20LTS%204.3 pkg:rpm/suse/openucx&distro=SUSE%20Manager%20Server%20LTS%204.3 pkg:rpm/suse/perf&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/perf&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/perf&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS pkg:rpm/suse/perf&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS pkg:rpm/suse/perf&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOS pkg:rpm/suse/perf&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSS pkg:rpm/suse/perf&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP6 pkg:rpm/suse/perf&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP7 pkg:rpm/suse/perf&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/perf&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS pkg:rpm/suse/perf&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS pkg:rpm/suse/perf&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/perf&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4 pkg:rpm/suse/perf&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5
< 2.45.1-r1+ 117 more
- (no CPE)range: < 2.45.1-r1
- (no CPE)range: < 2.45.1-r1
- (no CPE)range: < 2.45.1-r1
- (no CPE)range: < 2.45.1-r1
- (no CPE)range: < 2.45.1-r1
- (no CPE)range: < 2.45.1-r1
- (no CPE)range: < 2.45.1-r1
- (no CPE)range: < 2.45.1-r1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-1.2
- (no CPE)range: < 7.5.0-160000.2.3
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 1.15.0-150600.3.5.2
- (no CPE)range: < 6.4.0.git33229.a3afe13a7f-150600.3.17.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-160000.1.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 2.45-150100.7.57.1
- (no CPE)range: < 7.5.0-160000.2.3
- (no CPE)range: < 7.5.0-160000.2.3
- (no CPE)range: < 1.9.0-150300.4.2.5
- (no CPE)range: < 1.9.0-150300.4.2.5
- (no CPE)range: < 1.11.1-150400.4.2.1
- (no CPE)range: < 1.11.1-150400.4.2.1
- (no CPE)range: < 1.13.1-150500.4.2.5
- (no CPE)range: < 1.13.1-150500.4.2.5
- (no CPE)range: < 1.15.0-150600.3.5.2
- (no CPE)range: < 1.17.0-150700.4.2.7
- (no CPE)range: < 1.9.0-150300.4.2.5
- (no CPE)range: < 1.11.1-150400.4.2.1
- (no CPE)range: < 1.13.1-150500.4.2.5
- (no CPE)range: < 1.9.0-150300.4.2.5
- (no CPE)range: < 1.11.1-150400.4.2.1
- (no CPE)range: < 1.13.1-150500.4.2.5
- (no CPE)range: < 1.11.1-150400.4.2.1
- (no CPE)range: < 1.11.1-150400.4.2.1
- (no CPE)range: < 5.3.18-150300.38.7.1
- (no CPE)range: < 5.3.18-150300.38.7.1
- (no CPE)range: < 5.14.21-150400.44.20.1
- (no CPE)range: < 5.14.21-150400.44.20.1
- (no CPE)range: < 5.14.21-150500.52.5.1
- (no CPE)range: < 5.14.21-150500.52.5.1
- (no CPE)range: < 6.4.0.git33229.a3afe13a7f-150600.3.17.1
- (no CPE)range: < 6.4.0.git54263.0aad576b1c-150700.3.2.2
- (no CPE)range: < 5.3.18-150300.38.7.1
- (no CPE)range: < 5.14.21-150400.44.20.1
- (no CPE)range: < 5.14.21-150500.52.5.1
- (no CPE)range: < 5.3.18-150300.38.7.1
- (no CPE)range: < 5.14.21-150400.44.20.1
- (no CPE)range: < 5.14.21-150500.52.5.1

Patches

Vulnerability mechanics

References

sourceware.org/bugzilla/show_bug.cginvdExploitIssue Tracking
sourceware.org/bugzilla/show_bug.cginvdExploitIssue Tracking
vuldb.comnvdThird Party AdvisoryVDB Entry
www.gnu.orgnvdThird Party AdvisoryVDB Entry
sourceware.org/bugzilla/attachment.cginvdBroken Link
vuldb.comnvdPermissions RequiredVDB Entry
cert-portal.siemens.com/productcert/html/ssa-082556.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.214
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000