GNU
GNU Security Releases - October 2025
gnu-2025-10 Oct 1, 2025 Source: Vendor
GNU security advisories for October 2025, compiled from CVE.org records.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.cve.org/CVERecord?id=CVE-2025-11412
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
6 lines
Showing 1–6 of 6
CVE-2025-11413
BR2025-0000-031875
Binutils
unclaimed
A vulnerability was found in GNU Binutils 2.45. Affected is the function elf_link_add_object_symbols of the file bfd/elflink.c of the component Linker. The manipulation results in out-of-bounds rea...
Credited as Yifan Zhang
CVE-2025-11414
BR2025-0000-031876
Binutils
unclaimed
A vulnerability was determined in GNU Binutils 2.45. Affected by this vulnerability is the function get_link_hash_entry of the file bfd/elflink.c of the component Linker. This manipulation causes o...
Credited as Yifan Zhang
CVE-2025-11494
BR2025-0000-031877
Binutils
unclaimed
A vulnerability was found in GNU Binutils 2.45. Impacted is the function _bfd_x86_elf_late_size_sections of the file bfd/elfxx-x86.c of the component Linker. The manipulation results in out-of-boun...
Credited as Yifan Zhang
CVE-2025-11495
BR2025-0000-031878
Binutils
unclaimed
A vulnerability was determined in GNU Binutils 2.45. The affected element is the function elf_x86_64_relocate_section of the file elf64-x86-64.c of the component Linker. This manipulation causes he...
Credited as Yifan Zhang
CVE-2025-11839
BR2025-0000-031879
Binutils
unclaimed
A security flaw has been discovered in GNU Binutils 2.45. Impacted is the function tg_tag_type of the file prdbg.c. Performing a manipulation results in unchecked return value. The attack needs to ...
Credited as JJLeo
CVE-2025-11840
BR2025-0000-031880
Binutils
unclaimed
A weakness has been identified in GNU Binutils 2.45. The affected element is the function vfinfo of the file ldmisc.c. Executing a manipulation can lead to out-of-bounds read. The attack can only b...
Credited as JJLeo