CVE-2025-3198CWE-401CWE-404

CVE-2025-3198

Low · published April 4, 2025

CVSS v3.1
3.3
EPSS
0%
Percentile
19.6
In the wild
Unconfirmed
What it is

A vulnerability has been found in GNU Binutils 2.43/2.44 and classified as problematic. Affected by this vulnerability is the function display_info of the file binutils/bucomm.c of the component objdump. The manipulation leads to memory leak. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The patch is named ba6ad3a18cb26b79e0e3b84c39f707535bbc344d. It is recommended to apply a patch to fix this issue.

The record
Technical detail
CVSS v3.1
3.3 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00282 · 19.6th percentile
Weaknesses
CWE-401 · Missing Release of Memory after Effective Lifetime; CWE-404 · Improper Resource Shutdown or Release
Published
2025-04-04T06:15Z
Affected products (2)
ProductVersionsFixed in
gnu/binutilsall versions—
gnu/binutilsall versions—
References (10)
https://sourceware.org/bugzilla/show_bug.cgi?id=32716 · [email protected]https://sourceware.org/bugzilla/show_bug.cgi?id=32716#c0 · [email protected]https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ba6ad3a18cb26b79e0e3b84c39f707535bbc344d · [email protected]https://vuldb.com/?ctiid.303151 · [email protected]https://vuldb.com/?id.303151 · [email protected]https://vuldb.com/?submit.545773 · [email protected]https://www.gnu.org/ · [email protected]https://cert-portal.siemens.com/productcert/html/ssa-082556.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-265688.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://sourceware.org/bugzilla/show_bug.cgi?id=32716 · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 04 APR 01:31Z
    GNU Binutils objdump bucomm.c display_info memory leak
    cvelistv5