CVE-2025-11839 GNU Binutils prdbg.c tg_tag_type return value
A local attacker can exploit an unchecked return value in GNU Binutils, potentially leading to undefined behavior or application instability.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-11839?
CVE-2025-11839 is a medium-severity vulnerability in Gnu Binutils, published on 16 Oct 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A security flaw has been discovered in GNU Binutils 2.45. Impacted is the function tg_tag_type of the file prdbg.c. Performing a manipulation results in unchecked return value. The attack needs to be approached locally. The exploit has been released to the public and may be used for attacks.
Which versions are affected by CVE-2025-11839?
It affects 1 product.
Products include Gnu Binutils.
How do I fix CVE-2025-11839?
Apply the vendor's patch.
Is CVE-2025-11839 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-11839 exists.
Other vulnerabilities in Gnu Binutils
Sources
Also known as AZL-68772, AZL-68775, BELL-CVE-2025-11839, CLSA-2025-1767028936, DEBIAN-CVE-2025-11839, ECHO-35a6-e58d-a2d7 and 4 more.