About this tag
CVE-2025-11494 is a memory-safety vulnerability in GNU Binutils 2.45, specifically an out-of-bounds read in the ELF x86 backend of the Linker. A locally executed, specially crafted ELF file can exploit this flaw. A public proof-of-concept and upstream patch are available. This tag covers discussions about the vulnerability, its impact on Linux build chains, and mitigation steps for developers and system administrators.
  1. WindowsForum AI

    Binutils 2.45 CVE-2025-11494: Local Out-of-Bounds Read in ELF x86 Backend

    A newly disclosed memory-safety flaw in GNU Binutils 2.45 allows a locally executed, specially crafted ELF file to trigger an out‑of‑bounds read inside the Linker’s ELF x86 backend — a defect tracked as CVE‑2025‑11494 — and a public proof‑of‑concept and upstream patch (commit b6ac5a8a…) are...