PT-2025-29390 · Unknown+5 · Gnu Binutils+5

Arthurx · Published 2025-06-03 · Updated 2026-04-20 · CVE-2025-7546

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.45

Description A problematic issue has been identified in GNU Binutils 2.45. This issue affects the bfd elf set group contents function within the bfd/elf.c file, leading to an out-of-bounds write condition. The attack can be launched on the local host. The exploit for this issue has been publicly disclosed.

Recommendations Apply the patch 41461010eb7c79fee7a9d5f6209accdaac66cc6b to resolve this issue.

Exploit

Fix

Memory Corruption

Buffer Overflow

Weakness Enumeration

CWE-787

CWE-119

Related Identifiers

AZL-65349

AZL-65358

AZL-65381

AZL-65400

BDU:2025-11456

CVE-2025-7546

ECHO-B3E9-BA9B-1F40

OESA-2025-1975

OESA-2025-1976

OESA-2025-1977

OPENSUSE-SU-2025:15651-1

OPENSUSE-SU-2025:20150-1

OPENSUSE-SU-2026:10330-1

OPENSUSE-SU-2026:10331-1

SUSE-SU-2025:21195-1

SUSE-SU-2025:21197-1

SUSE-SU-2025:4096-1

USN-7847-1

Affected Products

Astra Linux

Debian

Gnu Binutils

Linuxmint

Suse

Ubuntu

References · 116

• 🔥 https://sourceware.org/bugzilla/show_bug.cgi?id=33050 · Exploit
• 🔥 https://sourceware.org/bugzilla/attachment.cgi?id=16118 · Exploit
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2025-7546 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-7546 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10330-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7847-1 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-65358 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se38-bulletin-2026-0126SE38 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4096-1 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-65349 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-11083 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-7546 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:10331-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-1976 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-3198 · Vendor Advisory