CVE-2025-11494

MediumCVSS 5.5/10Last modified Oct 8, 2026

Description

A vulnerability was found in GNU Binutils 2.45. Impacted is the function _bfd_x86_elf_late_size_sections of the file bfd/elfxx-x86.c of the component Linker. The manipulation results in out-of-bounds read. The attack needs to be approached locally. The exploit has been made public and could be used. The patch is identified as b6ac5a8a5b82f0ae6a4642c8d7149b325f4cc60a. A patch should be applied to remediate this issue.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-119 CWE-125

Affected software

Vendor	Product	Versions
GNU	Binutils	2.45
Siemens	SIMATIC S7-1500 CPU 1518-4 PN/DP MFP	>= V3.1.5, < *
Siemens	SIMATIC S7-1500 CPU 1518-4 PN/DP MFP	>= V3.1.5, < *
Siemens	SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP	>= V3.1.5, < *
Siemens	SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP	>= V3.1.5, < *
Siemens	SIPLUS S7-1500 CPU 1518-4 PN/DP MFP	>= V3.1.5, < *

References

https://sourceware.org/bugzilla/attachment.cgi?id=16389Broken Link
https://sourceware.org/bugzilla/show_bug.cgi?id=33499Exploit, Issue Tracking
https://sourceware.org/bugzilla/show_bug.cgi?id=33499#c2Exploit, Issue Tracking
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=b6ac5a8a5b82f0ae6a4642c8d7149b325f4cc60aPatch
https://vuldb.com/?ctiid.327619Permissions Required, VDB Entry
https://vuldb.com/?id.327619Third Party Advisory, VDB Entry
https://vuldb.com/?submit.668281Third Party Advisory, VDB Entry
https://www.gnu.org/Product
https://cert-portal.siemens.com/productcert/html/ssa-082556.html

Timeline

Published: Oct 8, 2025
Last modified: Oct 8, 2026
NVD status: Modified

Related CVEs from 2025

CVE-2025-114955.5A vulnerability was determined in GNU Binutils 2.45. The affected element is the function elf_x86_64_relocate_section of the file elf64-x86-CVE-2025-114966.1The Five Star Restaurant Reservations – WordPress Booking Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'CVE-2025-114974.3The Advanced Database Cleaner plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.6. CVE-2025-114986.1An Improper Neutralization of Formula Elements in a CSV File vulnerability exists in System Diagnostics Manager (SDM) of B&R Automation Runt CVE-2025-114999.8The Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent plugin for WordPress is vulnerable to arbitrary file uploa CVE-2025-11503.1A vulnerability was found in GNU Binutils 2.43. It has been declared as problematic. This vulnerability affects the function bfd_malloc of t CVE-2025-115008.7Tinycontrol devices such as tcPDU and LAN Controllers LK3.5, LK3.9 and LK4 have two separate authentication mechanisms - one solely for inte CVE-2025-115017.5The Dynamically Display Posts plugin for WordPress is vulnerable to SQL Injection via the 'tax_query' parameter in all versions up to, and i CVE-2025-115026.4The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'saswp_tiny_mul CVE-2025-115039.8A vulnerability was determined in PHPGurukul Beauty Parlour Management System 1.1. This issue affects some unknown processing of the file /a CVE-2025-115047.5The Quickcreator – AI Blog Writer plugin for WordPress is vulnerable to Sensitive Information Exposure in versions 0.0.9 to 0.1.17 through t CVE-2025-115059.8A vulnerability was identified in PHPGurukul Beauty Parlour Management System 1.1. Impacted is an unknown function of the file /admin/new-ap