CVE detail
CVE-2025-11083
A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elf_swap_shdr in the library bfd/elfcode.h of the component Linker. The manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit has been disclosed to the public and may be used. The identifier of the patch is 9ca499644a21ceb3f946d1c179c38a83be084490. To fix this issue, it is recommended to deploy a patch. The code maintainer replied with "[f]ixed for 2.46".
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 24.0 · diversity 20.0 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
10 source links · newest first
Information published.
vendormsrc.microsoft.comMay 3, 2026, 8:02 AM- https://cert-portal.siemens.com/productcert/html/ssa-082556.htmlcert-portal.siemens.com
No excerpt available.
Vendor Advisorycert-portal.siemens.comSep 27, 2025, 11:15 PM - https://www.gnu.org/www.gnu.org
No excerpt available.
Third Party Advisorywww.gnu.orgSep 27, 2025, 11:15 PM - https://vuldb.com/?submit.661277vuldb.com
No excerpt available.
Exploitvuldb.comSep 27, 2025, 11:15 PM - https://vuldb.com/?id.326124vuldb.com
No excerpt available.
Exploitvuldb.comSep 27, 2025, 11:15 PM - https://vuldb.com/?ctiid.326124vuldb.com
No excerpt available.
Exploitvuldb.comSep 27, 2025, 11:15 PM - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=9ca499644a21ceb3f946d1c179c38a83be084490sourceware.org
No excerpt available.
Exploitsourceware.orgSep 27, 2025, 11:15 PM - https://sourceware.org/bugzilla/show_bug.cgi?id=33457#c1sourceware.org
No excerpt available.
Exploitsourceware.orgSep 27, 2025, 11:15 PM - https://sourceware.org/bugzilla/show_bug.cgi?id=33457sourceware.org
No excerpt available.
Exploitsourceware.orgSep 27, 2025, 11:15 PM - https://sourceware.org/bugzilla/attachment.cgi?id=16353sourceware.org
No excerpt available.
Exploitsourceware.orgSep 27, 2025, 11:15 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2025-11495CVSS 1.9 · Low
A vulnerability was determined in GNU Binutils 2.45. The affected element is the function elf_x86_64_relocate_section of the file elf64-x86-64.c of the component Linker. This mani…
- CVE-2025-11082CVSS 1.9 · Low
A flaw has been found in GNU Binutils 2.45. Impacted is the function _bfd_elf_parse_eh_frame of the file bfd/elf-eh-frame.c of the component Linker. Executing manipulation can lea…
- CVE-2025-7545CVSS 1.9 · Low
A vulnerability classified as problematic was found in GNU Binutils 2.45. Affected by this vulnerability is the function copy_section of the file binutils/objcopy.c. The manipulat…
- CVE-2025-1176CVSS 2.3 · Low
A vulnerability was found in GNU Binutils 2.43 and classified as critical. This issue affects the function _bfd_elf_gc_mark_rsec of the file elflink.c of the component ld. The man…
- CVE-2026-15520CVSS 1.9 · Low
A vulnerability was determined in GNU LibreDWG 0.13.4-154-g0b573035. This impacts the function decompress_R2004_section of the file src/decode.c of the component R2004 Section Dec…
- CVE-2026-15506CVSS 7.1 · High
A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. The affected element is an unknown function in the library saappctl.sys of the component Driver. S…