CVE Vulnerabilities

CVE-2025-11839

Unchecked Return Value

Published: Oct 16, 2025 | Modified: Nov 06, 2025
CVSS 3.x
5.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
3.3 LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Ubuntu
MEDIUM

A security flaw has been discovered in GNU Binutils 2.45. Impacted is the function tg_tag_type of the file prdbg.c. Performing manipulation results in unchecked return value. The attack needs to be approached locally. The exploit has been released to the public and may be exploited.

Weakness

The product does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.

Affected Software

Name Vendor Start Version End Version
Binutils Gnu 2.45 (including) 2.45 (including)
Binutils Ubuntu devel *
Binutils Ubuntu esm-infra-legacy/trusty *
Binutils Ubuntu esm-infra/bionic *
Binutils Ubuntu esm-infra/focal *
Binutils Ubuntu esm-infra/xenial *
Binutils Ubuntu jammy *
Binutils Ubuntu noble *
Binutils Ubuntu plucky *
Binutils Ubuntu questing *
Binutils Ubuntu upstream *

Potential Mitigations

References