Homepage

Buffer Access with Incorrect Length Value The advisory has been revoked - it doesn't affect any version of package gdb.src  (opens in a new tab)

Threat Intelligence

EPSS
0.03% (8th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-RHEL10-GDBSRC-15247455
  • published7 Feb 2026
  • disclosed8 Oct 2025
Report a new vulnerability Found a mistake?

Introduced: 8 Oct 2025

CVE-2025-11495  (opens in a new tab)
CWE-805  (opens in a new tab)

Amendment

The Red Hat security team deemed this advisory irrelevant for RHEL:10.

NVD Description

Note: Versions mentioned in the description apply only to the upstream gdb.src package and not the gdb.src package as distributed by RHEL.

A vulnerability was determined in GNU Binutils 2.45. The affected element is the function elf_x86_64_relocate_section of the file elf64-x86-64.c of the component Linker. This manipulation causes heap-based buffer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Patch name: 6b21c8b2ecfef5c95142cbc2c32f185cb1c26ab0. To fix this issue, it is recommended to deploy a patch.