CVE-2025-11082: GNU Binutils Linker elf-eh-frame.c _bfd_elf_parse_eh_frame heap-based overflow
A flaw has been found in GNU Binutils 2.45. Impacted is the function bfdelfparseehframe of the file bfd/elf-eh-frame.c of the component Linker. Executing manipulation can lead to heap-based buffer overflow. The attack is restricted to local execution. The exploit has been published and may be used. This patch is called ea1a0737c7692737a644af0486b71e4a392cbca8. A patch should be applied to remediate this issue. The code maintainer replied with "[f]ixed for 2.46".
Other sources
GNU Binutils Linker elf-eh-frame.c bfdelfparseehframe heap-based overflow
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
GNU Binutilsto a version that resolves this vulnerability.Fixed in 2.46 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch 9ca499644a21ceb3f946d1c179c38a83be084490 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch ea1a0737c7692737a644af0486b71e4a392cbca8 - Compensating control
Because the issue is described as local-only execution, restrict local access to systems where GNU Binutils (Linker) may be used/processed (e.g., limit who can run local binaries that trigger elf-eh-frame parsing).
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11082?
CVE-2025-11082 is classified as a high severity vulnerability due to the potential for local exploitation leading to heap-based buffer overflow.
How do I fix CVE-2025-11082?
To fix CVE-2025-11082, upgrade GNU Binutils to version 2.46 or later.
What component is affected by CVE-2025-11082?
CVE-2025-11082 affects the GNU Binutils component, specifically the function _bfd_elf_parse_eh_frame in the file bfd/elf-eh-frame.c.
Is remote execution possible with CVE-2025-11082?
No, CVE-2025-11082 is restricted to local execution only.
What type of vulnerability is CVE-2025-11082?
CVE-2025-11082 is a heap-based buffer overflow vulnerability.