PT-2026-24066 · Gnu+1 · Gnu Binutils+1

Published 2026-03-09 · Updated 2026-05-06 · CVE-2025-69648

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions GNU Binutils versions through 2.45.1

Description GNU Binutils’ readelf utility is susceptible to a denial-of-service condition when processing a specially crafted binary file containing malformed DWARF .debug rnglists data. A flaw in the DWARF parsing logic causes readelf to enter a non-terminating output loop, continuously printing the same warning message and requiring manual intervention to stop. No memory corruption or code execution has been observed.

Recommendations Versions prior to 2.45.1 are affected. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Infinite Loop

Weakness Enumeration

CWE-835

Related Identifiers

BDU:2026-07158

CVE-2025-69648

ECHO-EDE0-D99F-450B

RHSA-2026:7098

Affected Products

Gnu Binutils

Red Os

References · 22

• 🔥 https://sourceware.org/bugzilla/show_bug.cgi?id=33641 · Exploit
• https://osv.dev/vulnerability/BELL-CVE-2025-69648 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-69648 · Vendor Advisory
• https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=598704a00cbac5e85c2bedd363357b5bf6fcee33 · Patch
• https://osv.dev/vulnerability/CVE-2025-69648 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-07158 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-69648 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-69648 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-69648 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-69648 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-69648 · Security Note
• https://redos.red-soft.ru/search/?iblock_id=24&q=CVE-2025-69648 · Note
• https://t.me/CVEtracker/46909 · Telegram Post
• https://t.me/msrcreports/3424 · Telegram Post
• https://twitter.com/infoflowcloud/status/2031123340711108741 · Twitter Post