CVE-2025-5245

MEDIUM5.3

GNU Binutils objdump debug.c debug_type_samep memory corruption

Published May 27, 2025

Modified 7 months ago

No fix available

Details

A vulnerability classified as critical has been found in GNU Binutils up to 2.44. This affects the function debug_type_samep of the file /binutils/debug.c of the component objdump. The manipulation leads to memory corruption. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue.

References

DETECTIONhttps://sourceware.org/bugzilla/attachment.cgi?id=16004 WEBhttps://sourceware.org/bugzilla/show_bug.cgi?id=32829 FIXhttps://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=6c3458a8b7ee7d39f070c7b2350851cb2110c65a WEBhttps://vuldb.com/?ctiid.310347 WEBhttps://vuldb.com/?id.310347 ADVISORYhttps://vuldb.com/?submit.584635 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-5245 WEBhttps://www.gnu.org/

CVSS Analysis

CVSS v3.0

5.3

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

LowC:L

Integrity

LowI:L

Availability

LowA:L

5.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weakness Type (CWE)

Memory Safety

CWE-119

Buffer Overflow

Ecosystems

Timeline

PublishedMay 27, 2025

ModifiedMay 27, 2025