Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:binutils:2.45:*:*:*:*:*:*:*

part: a version: 2.45 update: *

VendorGnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9)
ProductBinutils (bdfd61c2-da72-5ce9-819e-45ee45378259)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/binutils purl2cpe 2026-06-01 10:11:54.199252
pkg:deb/ubuntu/binutils purl2cpe 2026-06-01 10:11:54.199253
pkg:github/bminor/binutils-gdb purl2cpe 2026-06-01 10:11:54.199254
pkg:redox-os/redox-os/binutils-gdb purl2cpe 2026-06-01 10:11:54.199256
pkg:rpm/fedora/binutils purl2cpe 2026-06-01 10:11:54.199257
pkg:rpm/opensuse/binutils purl2cpe 2026-06-01 10:11:54.199258
pkg:sourceware/binutils-gdb purl2cpe 2026-06-01 10:11:54.199260

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-7546 vulnerable 2026-06-08 07:45:17.640424 GNU Binutils elf.c bfd_elf_set_group_contents out-of-bounds write
MEDIUM (5.3)
A vulnerability, which was classified as problematic, has been found in GNU Binutils 2.45. Affected by this issue is the function bfd_elf_set_group_contents of the file bfd/elf.c. The manipulation leads to out-of-bounds write. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The name of the patch is 41461010eb7c79fee7a9d5f6209accdaac66cc6b. It is recommended to apply a patch to fix this issue.
Published: 2025-07-13T22:02:07.589Z
Updated: 2026-07-14T12:39:13.510Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7545 vulnerable 2026-06-08 07:45:17.639432 GNU Binutils objcopy.c copy_section heap-based overflow
MEDIUM (5.3)
A vulnerability classified as problematic was found in GNU Binutils 2.45. Affected by this vulnerability is the function copy_section of the file binutils/objcopy.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The patch is named 08c3cbe5926e4d355b5cb70bbec2b1eeb40c2944. It is recommended to apply a patch to fix this issue.
Published: 2025-07-13T21:44:08.027Z
Updated: 2026-07-14T12:39:12.274Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11840 vulnerable 2026-06-08 07:04:29.059348 GNU Binutils ldmisc.c vfinfo out-of-bounds
LOW (3.3)
A weakness has been identified in GNU Binutils 2.45. The affected element is the function vfinfo of the file ldmisc.c. Executing a manipulation can lead to out-of-bounds read. The attack can only be executed locally. The exploit has been made available to the public and could be used for attacks. This patch is called 16357. It is best practice to apply a patch to resolve this issue.
Published: 2025-10-16T15:32:11.651Z
Updated: 2026-07-14T12:39:31.240Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11839 vulnerable 2026-06-08 07:04:29.058703 GNU Binutils prdbg.c tg_tag_type return value
LOW (3.3)
A security flaw has been discovered in GNU Binutils 2.45. Impacted is the function tg_tag_type of the file prdbg.c. Performing a manipulation results in unchecked return value. The attack needs to be approached locally. The exploit has been released to the public and may be used for attacks.
Published: 2025-10-16T14:02:13.689Z
Updated: 2026-07-14T12:39:30.022Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11495 vulnerable 2026-06-08 07:04:28.245697 GNU Binutils Linker elf64-x86-64.c elf_x86_64_relocate_section heap-based overflow
LOW (3.3)
A vulnerability was determined in GNU Binutils 2.45. The affected element is the function elf_x86_64_relocate_section of the file elf64-x86-64.c of the component Linker. This manipulation causes heap-based buffer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Patch name: 6b21c8b2ecfef5c95142cbc2c32f185cb1c26ab0. To fix this issue, it is recommended to deploy a patch.
Published: 2025-10-08T20:02:07.807Z
Updated: 2026-07-14T12:39:28.788Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11494 vulnerable 2026-06-08 07:04:28.244769 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11414 vulnerable 2026-06-08 07:02:28.722659 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11413 vulnerable 2026-06-08 07:02:28.722062 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11412 vulnerable 2026-06-08 07:02:28.721162 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11083 vulnerable 2026-06-08 07:02:28.023798 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11082 vulnerable 2026-06-08 07:02:28.023004 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11081 vulnerable 2026-06-08 07:02:28.022210 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.