PT-2026-23729 · Gnu · Binutils

Published 2026-03-06 · Updated 2026-03-11 · CVE-2025-69645

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Binutils version 2.44

Description Binutils objdump is susceptible to a denial-of-service condition when processing a specially crafted binary file containing improperly formatted DWARF debug information. A flaw in the handling of DWARF compilation units can cause an invalid offset size value to be used within the byte get little endian function, resulting in a program termination (SIGABRT). A local attacker can exploit this by providing a malicious input file.

Recommendations Versions prior to 2.44 are affected.

Exploit

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

AZL-79568

AZL-79592

CVE-2025-69645

ECHO-7B55-CAF2-9539

RHSA-2026:7098

Affected Products

Binutils

References · 15

• 🔥 https://sourceware.org/bugzilla/show_bug.cgi?id=33637 · Exploit
• https://ubuntu.com/security/CVE-2025-69645 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-69645 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-69645 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2025-69645 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-69645 · Security Note
• https://osv.dev/vulnerability/CVE-2025-69645 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-69645 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-79568 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-79592 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-69645 · Vendor Advisory
• https://t.me/CVEtracker/46628 · Telegram Post
• https://docs.bell-sw.com/security/cves/CVE-2025-69645 · Note
• https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=cdb728d4da6184631989b192f1022c219dea7677 · Note
• https://t.me/msrcreports/3352 · Telegram Post