CVE-2025-11839
binutils: GNU Binutils prdbg.c tg_tag_type return value
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 16, 2025
Updated · September 1, 2026
Description
An uncheck return value flaw has been discovered in the GNU binutils program. This flaw exists in the tg_tag_type function of the file prdbg.c and exploitation of this flaw may lead to a program crash.
Statement
Red Hat rates this vulnerability as Low as a result of how the GNU Binutils are configured to be used in Red Hat products. When running with default configurations the affected program will have limited privileges and thus the availability impact of this flaw will be restricted.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
CVSS / CWE
CVSS 3.1 · 3.3CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CWE-252 · Unchecked Return Value