A security flaw has been discovered in GNU Binutils 2.45. Impacted is the function tg_tag_type of the file prdbg.c. Performing manipulation results in unchecked return value. The attack needs to be approached locally. The exploit has been released to the public and may be exploited.

References

• https://nvd.nist.gov/vuln/detail/CVE-2025-11839
• https://sourceware.org/bugzilla/attachment.cgi?id=16344
• https://sourceware.org/bugzilla/show_bug.cgi?id=33448
• https://vuldb.com/?ctiid.328774
• https://vuldb.com/?id.328774
• https://vuldb.com/?submit.661279
• https://www.gnu.org