Back Linuxsecurity

Fedora 42 avr-binutils Severe Heap Overflow Vulnerabilities CVE-2025

Linuxsecurity •LinuxSecurity Advisories • March 4, 2026

This is a Cross Compiling version of GNU binutils, which can be used to assemble and link binaries for the avr platform, instead of for the native i386 platform. Update Information : fix CVE-2025-11083: heap-based overflow fix CVE-2025-11082: heap-based overflow fix CVE-2025-11081: out-of-bounds read

This is a Cross Compiling version of GNU binutils, which can be used to

assemble and link binaries for the avr platform, instead of for the

native i386 platform.

fix CVE-2025-11083: heap-based overflow fix CVE-2025-11082: heap-based overflow fix CVE-2025-11081: out-of-bounds read

* Wed Feb 18 2026 Michal Hlavinka - 1:2.45-4.1 - rebuild * Mon Oct 20 2025 Michal Hlavinka - 1:2.45-4 - fix CVE-2025-11083: heap-based overflow (rhbz#2400336) * Thu Oct 16 2025 Michal Hlavinka - 1:2.45-3 - fix CVE-2025-11082: heap-based overflow (rhbz#2400340) * Thu Oct 16 2025 Michal Hlavinka - 1:2.45-2 - fix CVE-2025-11081: out-of-bounds read (rhbz#2400335)

[ 1 ] Bug #2400335 - CVE-2025-11081 avr-binutils: GNU Binutils out-of-bounds read [fedora-42] [ 2 ] Bug #2400340 - CVE-2025-11082 avr-binutils: GNU Binutils Linker heap-based overflow [fedora-42]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-405dab5af2' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fedora 42 and 43 Address Severe Heap Overflow Vulnerabilities in avr-binutils Fedora has released updates for the avr-binutils package to address three severe heap overflow vulnerabilities, identified as CVE-2025-11081, CVE-2025-11082, and CVE-2025-11083. These vulnerabilities affect users compiling binaries for the avr platform, potentially leading to out-of-bounds reads and memory corruption. Users are advised to update their packages to mitigate these risks. 2 sources 52

Extracted Entities

CVEs (3)

CVE-2025-11081 CVE-2025-11082 CVE-2025-11083

Platforms (2)

Avr I386