CVE-2025-11083

High

Advisory

Published 27 Sept 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.8; base score, highest
EPSS: 0.003; 17th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 399; of 17,787 indexed, latest versions
Container images: 377; deployed by those charts
Fix available: 4 of 4; affected packages

Red Hat Security Advisory: gcc-toolset-13-binutils security update

Carried by container images the latest versions of 399 of 17,787 indexed charts deploy, on 377 images.

Affected package	Affected versions	Fixed in	Images
binutilsdeb	2.24-5ubuntu3.1, 2.24-5ubuntu14.2, 2.26.1-1ubuntu1~16.04.5, 2.26.1-1ubuntu1~16.04.6+35 more	2.24-5ubuntu14.2+esm8, 2.26.1-1ubuntu1~16.04.8+esm14, 2.30-21ubuntu1~18.04.9+esm13, 2.34-6ubuntu1.11+esm2+3 more	361
binutilsrpm	2.30-73.el8, 2.30-93.el8, 2.30-113.el8, 2.30-117.el8+5 more	0:2.30-128.el8_10, 0:2.35.2-67.el9_7.1	15
gcc-toolset-13-binutilsrpm	2.40-21.el9	0:2.40-21.el9_7.1	1
binutilsapk	2.45-r0	2.45.1-r0	1

OSV records: DEBIAN-CVE-2025-11083 CGA-hrr6-r28w-hw3c RHSA-2025:23336 RHSA-2025:23343 RHSA-2025:23382 RLSA-2025:23343 RLSA-2025:23382 UBUNTU-CVE-2025-11083
Also known as: CGA-w9fm-h6gq-qh2c, RHSA-2025:23359, RHSA-2025:23400, RHSA-2026:0343, RHSA-2026:0479, RHSA-2026:0480, RHSA-2026:0481, USN-7919-1

Charts affected

399 by stars

Chart	Latest	Affected images	Radar Score

Container images carrying it

377 by charts deploying them

A fixed version is listed for 4 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/streamingfast/substreams-sink-kv :v2.3.0	26953ec68d5d	binutils@2.34-6ubuntu1.9	2.34-6ubuntu1.11+esm2	1
ghcr.io/streamingfast/substreams-sink-noop :v1.4.0	d7c43c3135c6	binutils@2.34-6ubuntu1.9	2.34-6ubuntu1.11+esm2	1
ghcr.io/wgbh-mla/ov-wag :v1.1.0	6df27f944fe8	binutils@2.40-2	no fix listed	1
ghcr.io/wgbh-mla/pbcore-util :pr-6	6e04659a3baa	binutils@2.40-2	no fix listed	1
ghcr.io/wizarrrr/wizarr :4.2.0-beta.3	d19d886d5090	binutils@2.40-2	no fix listed	1
ghcr.io/wundergraph/cosmo/otelcollector :0.18.1	5a6fe78d4d15	binutils@2.40-2	no fix listed	1
ghcr.io/yourls/yourls :1.10.6	9b220ea83329	binutils@2.44-3	no fix listed	1
ghcr.io/zoriya/kyoo_autosync :4.7.1	fbba58ddb1a6	binutils@2.40-2	no fix listed	1
ghcr.io/zoriya/kyoo_scanner :4.7.1	7dc0ee57b628	binutils@2.40-2	no fix listed	1
public.ecr.aws/jtekt-corporation/image-storage-service :v1.16.17	b1493760c716	binutils@2.40-2	no fix listed	1
public.ecr.aws/jtekt-corporation/shinsei-manager :v2.8.1	5cd62142d6ed	binutils@2.40-2	no fix listed	1
public.ecr.aws/jtekt-corporation/time-series-storage-service :v1.5.1	046ef5c9ed50	binutils@2.40-2	no fix listed	1
public.ecr.aws/outerbounds/metaflow_metadata_service :v2.4.13	f7567ce3419d	binutils@2.40-2	no fix listed	1
public.ecr.aws/truefoundrycloud/async-service-distributor :5d48113bc678d694a0c8f8dabb2207c5aa2cfc53	f74851ce31f5	binutils@2.40-2	no fix listed	1
quay.io/ai-lab/llamacpp_python :latest	70d138997acd	binutils@2.35.2-43.el9 gcc-toolset-13-binutils@2.40-21.el9	0:2.35.2-67.el9_7.1 0:2.40-21.el9_7.1	1
quay.io/argoprojlabs/gitops-promoter :v0.38.1	9c8a510dc25e	binutils@2.44-3	no fix listed	1
quay.io/eformat/jenkins-agent-graalvm :latest	a3b9a07648b6	binutils@2.30-93.el8	0:2.30-128.el8_10	1
quay.io/fiware/waltid :1.14.1-SNAPSHOT	93889c3d8a34	binutils@2.38-4ubuntu2	2.38-4ubuntu2.10	1
quay.io/galexrt/dellhw_exporter :v2.0.0-rc.1	8a1361fa38c1	binutils@2.35.2-43.el9	0:2.35.2-67.el9_7.1	1
quay.io/hpestorage/filex-csi-driver :2.6.4	b7f960bbf472	binutils@2.35.2-67.el9	0:2.35.2-67.el9_7.1	1
quay.io/ibmgaragecloud/developer-dashboard :v1.4.4	7a4b9fedc724	binutils@2.30-73.el8	0:2.30-128.el8_10	1
quay.io/mittwald/kube-httpcache :stable	2169032c5840	binutils@2.40-2	no fix listed	1
quay.io/redhat-ai-dev/chatbot :latest	59fe607dfdf2	binutils@2.35.2-43.el9	0:2.35.2-67.el9_7.1	1
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	binutils@2.40-2	no fix listed	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer :1.0.31	0e3cd8c7776d	binutils@2.40-2	no fix listed	1
registry.gitlab.com/infinitydon/registry/open5gs-aio :v2.2.2	f6385712935f	binutils@2.34-6ubuntu1.1	2.34-6ubuntu1.11+esm2	1
registry.gitlab.com/school_guy/docker-typo3 :13.4.30-197d868e	d76185d7270d	binutils@2.40-2	no fix listed	1