PT-2026-23730 · Gnu · Binutils

Published 2026-03-06 · Updated 2026-03-11 · CVE-2025-69646

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Binutils version 2.44

Description Binutils objdump is subject to a denial-of-service condition when processing a specially crafted binary file containing malformed DWARF debug rnglists data. A flaw in how the debug rnglists header is processed can cause objdump to enter an infinite loop, repeatedly printing the same warning message and preventing normal termination. This results in excessive CPU and I/O usage, potentially halting the objdump analysis. A local attacker can trigger this by providing a malicious input file.

Recommendations Update to a newer version of Binutils that addresses this issue.

Exploit

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

AZL-79559

AZL-79583

CVE-2025-69646

ECHO-3C7E-9799-1DBC

RHSA-2026:7098

Affected Products

Binutils

References · 15

• 🔥 https://sourceware.org/bugzilla/show_bug.cgi?id=33638 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-69646 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-69646 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-69646 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-69646 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-69646 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-79559 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-79583 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-69646 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2025-69646 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-69646 · Vendor Advisory
• https://t.me/CVEtracker/46629 · Telegram Post
• https://t.me/msrcreports/3354 · Telegram Post
• https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=598704a00cbac5e85c2bedd363357b5bf6fcee33 · Note
• https://docs.bell-sw.com/security/cves/CVE-2025-69646 · Note