CVE-2025-5245 | BDVDB-2026-280341 Detail
GNUBinutils
Description#
A vulnerability classified as critical has been found in GNU Binutils up to 2.44. This affects the function debug_type_samep of the file /binutils/debug.c of the component objdump. The manipulation leads to memory corruption. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue.
Impact#
Per CVSS v3.1: confidentiality impact low, integrity impact low, availability impact low. Attack vector: local.
Weaknesses#
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
References#
- https://vuldb.com/?id.310347
- https://vuldb.com/?ctiid.310347
- https://vuldb.com/?submit.584635
- https://sourceware.org/bugzilla/show_bug.cgi?id=32829
- https://sourceware.org/bugzilla/attachment.cgi?id=16004
- https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=6c3458a8b7ee7d39f070c7b2350851cb2110c65a
- https://www.gnu.org/
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
Exploit#
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.