Heap-based buffer overflow in Binutils - CVE-2025-11083

 

Heap-based buffer overflow in Binutils - CVE-2025-11083

Published: October 14, 2025


Vulnerability identifier: #VU116973
CSH Severity: Low
CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-11083
CWE-ID: CWE-122
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error within the elf_swap_shdr() function in bfd/elfcode.h. A local user can trigger a heap-based buffer overflow and execute arbitrary code on the target system.


Affected software

Binutils
SUSE Manager Server 4.3
SUSE Manager Retail Branch Server 4.3
SUSE Manager Proxy 4.3
SUSE Linux Enterprise Server 15 SP3
SUSE Linux Enterprise Server 15 SP5
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Enterprise Storage
Anolis OS
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Ubuntu
Basesystem Module
Development Tools Module
SUSE Package Hub 15
openSUSE Leap
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Server
openEuler
Fedora
Juniper Secure Analytics (JSA)
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
libuct0-64bit-debuginfo
libucs0-debuginfo
libucs0
libuct-devel
libucp-devel
libucm0-debuginfo
openucx-tools
libucp0
libuct0
openucx-debugsource
libucm0-64bit
libucp0-debuginfo
libuct0-64bit
libucm-devel
libucp0-64bit-debuginfo
libuct0-debuginfo
libucm0
libucp0-64bit
libucs-devel
libucs0-64bit-debuginfo
libucm0-64bit-debuginfo
openucx-tools-debuginfo
libucs0-64bit
openucx-debuginfo
binutils (Ubuntu package)
binutils (Red Hat package)
binutils
binutils-devel
gcc-toolset-13-binutils (Red Hat package)
gcc-toolset-14-binutils (Red Hat package)
binutils-doc
binutils-gold
mingw-binutils
gcc-toolset-15-binutils (Red Hat package)
avr-binutils
cross-epiphany-binutils
cross-ppc-binutils
cross-spu-binutils-debugsource
cross-ia64-binutils
cross-rx-binutils-debugsource
cross-hppa-binutils-debuginfo
cross-spu-binutils
cross-sparc64-binutils
cross-rx-binutils-debuginfo
cross-ppc64le-binutils
cross-arm-binutils
libctf-nobfd0
cross-m68k-binutils-debugsource
cross-hppa-binutils
cross-ppc-binutils-debuginfo
cross-riscv64-binutils
libctf0
cross-s390-binutils-debuginfo
binutils-debugsource
cross-hppa64-binutils
cross-m68k-binutils-debuginfo
cross-s390-binutils-debugsource
cross-ppc-binutils-debugsource
cross-mips-binutils-debugsource
cross-riscv64-binutils-debuginfo
cross-ppc64-binutils
cross-riscv64-binutils-debugsource
cross-hppa64-binutils-debuginfo
cross-sparc-binutils-debuginfo
libctf0-debuginfo
cross-bpf-binutils-debugsource
cross-spu-binutils-debuginfo
cross-arm-binutils-debugsource
cross-ia64-binutils-debuginfo
cross-ia64-binutils-debugsource
cross-avr-binutils-debuginfo
cross-sparc64-binutils-debuginfo
cross-m68k-binutils
cross-epiphany-binutils-debugsource
cross-sparc64-binutils-debugsource
cross-pru-binutils-debugsource
cross-ppc64le-binutils-debuginfo
cross-bpf-binutils-debuginfo
binutils-devel-32bit
cross-aarch64-binutils-debuginfo
cross-aarch64-binutils
cross-aarch64-binutils-debugsource
cross-ppc64le-binutils-debugsource
cross-mips-binutils-debuginfo
cross-arm-binutils-debuginfo
cross-pru-binutils
cross-sparc-binutils
cross-x86_64-binutils-debugsource
cross-i386-binutils-debuginfo
cross-x86_64-binutils
cross-x86_64-binutils-debuginfo
cross-s390x-binutils-debugsource
cross-s390x-binutils
cross-s390x-binutils-debuginfo
cross-avr-binutils
cross-ppc64-binutils-debuginfo
cross-hppa-binutils-debugsource
cross-mips-binutils
cross-sparc-binutils-debugsource
cross-avr-binutils-debugsource
cross-s390-binutils
cross-xtensa-binutils-debugsource
cross-xtensa-binutils
binutils-debuginfo
cross-hppa64-binutils-debugsource
cross-pru-binutils-debuginfo
cross-xtensa-binutils-debuginfo
cross-i386-binutils
cross-ppc64-binutils-debugsource
cross-epiphany-binutils-debuginfo
cross-rx-binutils
cross-bpf-binutils
cross-i386-binutils-debugsource
libctf-nobfd0-debuginfo
gprofng
gprofng-debuginfo
perf-debugsource
perf
perf-debuginfo
perf-devel
perf-bash-completion
perf-gtk
perf-gtk-debuginfo
bpftool-debuginfo
bpftool
bpftool-bash-completion
bpftool-debugsource
gdb-help
gdb
gdb-debuginfo
gdb-debugsource
gdb-gdbserver
gdb-headless
insight
CICS Transaction Gateway for Multiplatforms
OpenShift Virtualization
Red Hat OpenShift Container Platform
Red Hat Update Infrastructure (RHUI)
IBM TXSeries for Multiplatforms
IBM Qradar SIEM
IBM CICS TX Standard

How to mitigate CVE-2025-11083

Install update from vendor's website.

Juniper Secure Analytics (JSA) - update to 7.5.0 UP15 IF01
libuct0-64bit-debuginfo - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1
libucs0-debuginfo - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libucs0 - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libuct-devel - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libucp-devel - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libucm0-debuginfo - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
openucx-tools - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libucp0 - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libuct0 - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
openucx-debugsource - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libucm0-64bit - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1
libucp0-debuginfo - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libuct0-64bit - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1
libucm-devel - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libucp0-64bit-debuginfo - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1
libuct0-debuginfo - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libucm0 - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libucp0-64bit - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1
libucs-devel - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libucs0-64bit-debuginfo - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1
libucm0-64bit-debuginfo - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1
openucx-tools-debuginfo - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libucs0-64bit - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1
openucx-debuginfo - addressed in versions 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
binutils (Ubuntu package) - addressed in versions 2.24-5ubuntu14.2+esm8, 2.26.1-1ubuntu1~16.04.8+esm14, 2.30-21ubuntu1~18.04.9+esm13, 2.34-6ubuntu1.11+esm2, 2.38-4ubuntu2.10, 2.38-4ubuntu2.12, 2.42-4ubuntu2.6, 2.42-4ubuntu2.8, 2.44-3ubuntu1.1, 2.44-3ubuntu1.3, 2.45-7ubuntu1.2
binutils (Red Hat package) - addressed in versions 2.30-73.el8_2.2, 2.30-93.el8_4.3, 2.30-113.el8_6.4, 2.30-119.el8_8.3, 2.35.2-43.el9_4.2, 2.35.2-63.el9_6.1, 2.41-53.el10_0.2, 2.41-58.el10_1.2
binutils - addressed in versions 2.30-128.0.1, 2.41-14
binutils-devel - addressed in versions 2.30-128.0.1, 2.41-14
gcc-toolset-13-binutils (Red Hat package) - update to 2.40-21.el9_4.1
gcc-toolset-14-binutils (Red Hat package) - addressed in versions 2.41-4.el8_10.1, 2.41-5.el9_7.1
binutils-doc - update to 2.41-14
binutils-gold - update to 2.41-14
mingw-binutils - addressed in versions 2.43.1-5.fc42, 2.45-2.fc43
gcc-toolset-15-binutils (Red Hat package) - addressed in versions 2.44-3.el9_7.1, 2.44-7.el10_1.1
avr-binutils - addressed in versions 2.45-4.fc42.1, 2.45-4.fc43.1, 2.45-4.fc44
cross-epiphany-binutils - update to 2.45-150100.7.57.1
cross-ppc-binutils - update to 2.45-150100.7.57.1
cross-spu-binutils-debugsource - update to 2.45-150100.7.57.1
cross-ia64-binutils - update to 2.45-150100.7.57.1
cross-rx-binutils-debugsource - update to 2.45-150100.7.57.1
cross-hppa-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-spu-binutils - update to 2.45-150100.7.57.1
cross-sparc64-binutils - update to 2.45-150100.7.57.1
cross-rx-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-ppc64le-binutils - update to 2.45-150100.7.57.1
cross-arm-binutils - update to 2.45-150100.7.57.1
libctf-nobfd0 - addressed in versions 2.45-150100.7.57.1, 2.45-160000.1.1
cross-m68k-binutils-debugsource - update to 2.45-150100.7.57.1
cross-hppa-binutils - update to 2.45-150100.7.57.1
binutils-devel - addressed in versions 2.45-150100.7.57.1, 2.45-160000.1.1
cross-ppc-binutils-debuginfo - update to 2.45-150100.7.57.1
binutils - addressed in versions 2.45-150100.7.57.1, 2.45-160000.1.1
cross-riscv64-binutils - update to 2.45-150100.7.57.1
libctf0 - addressed in versions 2.45-150100.7.57.1, 2.45-160000.1.1
cross-s390-binutils-debuginfo - update to 2.45-150100.7.57.1
binutils-debugsource - addressed in versions 2.45-150100.7.57.1, 2.45-160000.1.1
cross-hppa64-binutils - update to 2.45-150100.7.57.1
cross-m68k-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-s390-binutils-debugsource - update to 2.45-150100.7.57.1
cross-ppc-binutils-debugsource - update to 2.45-150100.7.57.1
cross-mips-binutils-debugsource - update to 2.45-150100.7.57.1
cross-riscv64-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-ppc64-binutils - update to 2.45-150100.7.57.1
cross-riscv64-binutils-debugsource - update to 2.45-150100.7.57.1
cross-hppa64-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-sparc-binutils-debuginfo - update to 2.45-150100.7.57.1
libctf0-debuginfo - addressed in versions 2.45-150100.7.57.1, 2.45-160000.1.1
cross-bpf-binutils-debugsource - update to 2.45-150100.7.57.1
cross-spu-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-arm-binutils-debugsource - update to 2.45-150100.7.57.1
cross-ia64-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-ia64-binutils-debugsource - update to 2.45-150100.7.57.1
cross-avr-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-sparc64-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-m68k-binutils - update to 2.45-150100.7.57.1
cross-epiphany-binutils-debugsource - update to 2.45-150100.7.57.1
cross-sparc64-binutils-debugsource - update to 2.45-150100.7.57.1
cross-pru-binutils-debugsource - update to 2.45-150100.7.57.1
cross-ppc64le-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-bpf-binutils-debuginfo - update to 2.45-150100.7.57.1
binutils-devel-32bit - update to 2.45-150100.7.57.1
cross-aarch64-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-aarch64-binutils - update to 2.45-150100.7.57.1
cross-aarch64-binutils-debugsource - update to 2.45-150100.7.57.1
cross-ppc64le-binutils-debugsource - update to 2.45-150100.7.57.1
cross-mips-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-arm-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-pru-binutils - update to 2.45-150100.7.57.1
cross-sparc-binutils - update to 2.45-150100.7.57.1
cross-x86_64-binutils-debugsource - update to 2.45-150100.7.57.1
cross-i386-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-x86_64-binutils - update to 2.45-150100.7.57.1
cross-x86_64-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-s390x-binutils-debugsource - update to 2.45-150100.7.57.1
cross-s390x-binutils - update to 2.45-150100.7.57.1
cross-s390x-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-avr-binutils - update to 2.45-150100.7.57.1
cross-ppc64-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-hppa-binutils-debugsource - update to 2.45-150100.7.57.1
cross-mips-binutils - update to 2.45-150100.7.57.1
cross-sparc-binutils-debugsource - update to 2.45-150100.7.57.1
cross-avr-binutils-debugsource - update to 2.45-150100.7.57.1
cross-s390-binutils - update to 2.45-150100.7.57.1
cross-xtensa-binutils-debugsource - update to 2.45-150100.7.57.1
cross-xtensa-binutils - update to 2.45-150100.7.57.1
binutils-debuginfo - addressed in versions 2.45-150100.7.57.1, 2.45-160000.1.1
cross-hppa64-binutils-debugsource - update to 2.45-150100.7.57.1
cross-pru-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-xtensa-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-i386-binutils - update to 2.45-150100.7.57.1
cross-ppc64-binutils-debugsource - update to 2.45-150100.7.57.1
cross-epiphany-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-rx-binutils - update to 2.45-150100.7.57.1
cross-bpf-binutils - update to 2.45-150100.7.57.1
cross-i386-binutils-debugsource - update to 2.45-150100.7.57.1
libctf-nobfd0-debuginfo - addressed in versions 2.45-150100.7.57.1, 2.45-160000.1.1
gprofng - update to 2.45-160000.1.1
gprofng-debuginfo - update to 2.45-160000.1.1
OpenShift Virtualization - update to 4.19.17
Red Hat OpenShift Container Platform - addressed in versions 4.19.23, 4.20.12
Red Hat Update Infrastructure (RHUI) - update to 5.0.0
perf-debugsource - addressed in versions 5.3.18-150300.38.7.1, 5.14.21-150400.44.20.1, 5.14.21-150500.52.5.1, 6.4.0.git33229.a3afe13a7f-150600.3.17.1, 6.4.0.git54263.0aad576b1c-150700.3.2.2
perf - addressed in versions 5.3.18-150300.38.7.1, 5.14.21-150400.44.20.1, 5.14.21-150500.52.5.1, 6.4.0.git33229.a3afe13a7f-150600.3.17.1, 6.4.0.git54263.0aad576b1c-150700.3.2.2
perf-debuginfo - addressed in versions 5.3.18-150300.38.7.1, 5.14.21-150400.44.20.1, 5.14.21-150500.52.5.1, 6.4.0.git33229.a3afe13a7f-150600.3.17.1, 6.4.0.git54263.0aad576b1c-150700.3.2.2
perf-devel - addressed in versions 5.14.21-150400.44.20.1, 5.14.21-150500.52.5.1, 6.4.0.git33229.a3afe13a7f-150600.3.17.1, 6.4.0.git54263.0aad576b1c-150700.3.2.2
perf-bash-completion - update to 6.4.0.git33229.a3afe13a7f-150600.3.17.1
perf-gtk - update to 6.4.0.git33229.a3afe13a7f-150600.3.17.1
perf-gtk-debuginfo - update to 6.4.0.git33229.a3afe13a7f-150600.3.17.1
IBM Qradar SIEM - update to 7.5.0 Update Pack 14 IF04
bpftool-debuginfo - update to 7.5.0-160000.2.3
bpftool - update to 7.5.0-160000.2.3
bpftool-bash-completion - update to 7.5.0-160000.2.3
bpftool-debugsource - update to 7.5.0-160000.2.3
gdb-help - addressed in versions 9.2-13, 11.1-14, 14.1-9, 14.1-11
gdb - addressed in versions 9.2-13, 11.1-14, 14.1-9, 14.1-11
gdb-debuginfo - addressed in versions 9.2-13, 11.1-14, 14.1-9, 14.1-11
gdb-debugsource - addressed in versions 9.2-13, 11.1-14, 14.1-9, 14.1-11
gdb-gdbserver - addressed in versions 9.2-13, 11.1-14, 14.1-9, 14.1-11
gdb-headless - addressed in versions 9.2-13, 11.1-14, 14.1-9, 14.1-11
IBM TXSeries for Multiplatforms - update to 11.1.0.0 ifix18
IBM CICS TX Standard - update to 11.1.0.0 ifix41
insight - addressed in versions 13.0.50.20220502-27.fc41, 13.0.50.20220502-27.fc42, 13.0.50.20220502-27.fc43

External References

Related Security Bulletins