Riskcovery

CVE-2025-5245

GNU Binutils objdump debug.c debug_type_samep memory corruption

State
Published
Severity
4.8 Medium
Published
May 27, 2025
Updated
Oct 15, 2026
Reserved
May 27, 2025

Read the record on cve.org

Description

A vulnerability classified as critical has been found in GNU Binutils up to 2.44. This affects the function debug_type_samep of the file /binutils/debug.c of the component objdump. The manipulation leads to memory corruption. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue.

Scores

CVSSScoreVectorSource
4.04.8 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:NVulDB
3.15.3 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LVulDB
3.05.3 MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LVulDB
2.04.3 MediumAV:L/AC:L/Au:S/C:P/I:P/A:PVulDB

Weaknesses

Affected Products

ProductVersions
BinutilsGNU
  • 2.0Affected
  • 2.1Affected
  • 2.2Affected
  • 2.3Affected
  • 2.4Affected
  • 2.5Affected
  • 2.6Affected
  • 2.7Affected
  • 2.8Affected
  • 2.9Affected
  • 2.10Affected
  • 2.11Affected
  • 2.12Affected
  • 2.13Affected
  • 2.14Affected
  • 2.15Affected
  • 2.16Affected
  • 2.17Affected
  • 2.18Affected
  • 2.19Affected
  • 2.20Affected
  • 2.21Affected
  • 2.22Affected
  • 2.23Affected
  • 2.24Affected
  • and 20 more versions

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.