GNU Binutils

Name: GNU Binutils
Brand: GNU

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical8high13medium4low

updated 2026-10-28

vulnerabilities (31)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-7545US	high7.8	0.30% (23rd)	Exploit	no fix	2025-07-13	≤ 2.45
CVE-2025-1153US	medium5.9	1.36% (72nd)	—	no fix	2025-02-10	2 versions
CVE-2025-1178US	—	0.80% (56th)	—	no fix	2025-02-11	≤ 2.43
CVE-2025-0840US	high7.5	0.75% (55th)	—	no fix	2025-01-29	44 versions
CVE-2025-1181US	—	0.71% (53rd)	—	no fix	2025-02-11	≤ 2.43
CVE-2025-1180US	—	0.70% (53rd)	—	no fix	2025-02-11	≤ 2.43
CVE-2025-1176US	medium5.0	0.67% (52nd)	—	no fix	2025-02-11	≤ 2.43
CVE-2025-1147US	medium5.3	0.67% (52nd)	—	no fix	2025-02-10	≤ 2.43
CVE-2025-1148US	low3.1	0.64% (50th)	—	no fix	2025-02-10	≤ 2.43
CVE-2025-1150US	low3.1	0.61% (49th)	—	no fix	2025-02-10	≤ 2.43
CVE-2025-1152US	low3.7	0.61% (49th)	—	no fix	2025-02-10	≤ 2.43
CVE-2025-1151US	—	0.61% (49th)	—	no fix	2025-02-10	≤ 2.43
CVE-2025-1182US	—	0.59% (48th)	—	no fix	2025-02-11	≤ 2.43
CVE-2025-1149US	low3.1	0.58% (47th)	—	no fix	2025-02-10	≤ 2.43
CVE-2025-1179US	high7.5	0.57% (47th)	—	no fix	2025-02-11	≤ 2.43
CVE-2025-5245US	high7.8	0.30% (22nd)	—	no fix	2025-05-27	45 versions
CVE-2025-5244US	high7.8	0.30% (22nd)	—	no fix	2025-05-27	45 versions
CVE-2025-3198US	medium5.5	0.28% (21st)	—	no fix	2025-04-04	2 versions
CVE-2025-11840US	medium5.5	0.28% (20th)	—	no fix	2025-10-16	≤ 2.45
CVE-2025-11839US	medium5.5	0.28% (20th)	—	no fix	2025-10-16	≤ 2.45
CVE-2025-11083US	high7.8	0.26% (18th)	—	no fix	2025-09-27	≤ 2.45
CVE-2025-11082US	high7.8	0.26% (18th)	—	no fix	2025-09-27	≤ 2.45
CVE-2025-8224US	medium5.5	0.26% (17th)	—	no fix	2025-07-27	≤ 2.44
CVE-2025-8225US	—	0.25% (17th)	—	no fix	2025-07-27	≤ 2.44
CVE-2025-11495US	medium5.5	0.24% (15th)	—	no fix	2025-10-08	≤ 2.45
CVE-2025-11413US	medium5.5	0.22% (13th)	—	no fix	2025-10-07	≤ 2.45
CVE-2025-11494US	medium5.5	0.21% (12th)	—	no fix	2025-10-08	≤ 2.45
CVE-2025-11414US	medium5.5	0.21% (11th)	—	no fix	2025-10-07	≤ 2.45
CVE-2025-11412US	medium5.5	0.21% (11th)	—	no fix	2025-10-07	≤ 2.45
CVE-2025-11081US	medium5.5	0.21% (11th)	—	no fix	2025-09-27	≤ 2.45
CVE-2025-7546US	high7.8	0.21% (11th)	—	no fix	2025-07-13	≤ 2.45

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer22 CVEs
CWE-404Improper Resource Shutdown or Release8 CVEs
CWE-401Missing Release of Memory after Effective Lifetime7 CVEs
CWE-125Out-of-bounds Read6 CVEs
CWE-122Heap-based Buffer Overflow5 CVEs
CWE-787Out-of-bounds Write2 CVEs
CWE-116Improper Encoding or Escaping of Output1 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)31 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan