CVE-2025-5245CWE-119

CVE-2025-5245

Medium · published May 27, 2025

CVSS v3.1
5.3
EPSS
0%
Percentile
20.0
In the wild
Unconfirmed
What it is

A vulnerability classified as critical has been found in GNU Binutils up to 2.44. This affects the function debug_type_samep of the file /binutils/debug.c of the component objdump. The manipulation leads to memory corruption. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00286 · 20.0th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2025-05-27T19:15Z
Affected products (1)
ProductVersionsFixed in
gnu/binutils< 2.452.45
References (9)
https://sourceware.org/bugzilla/attachment.cgi?id=16004 · [email protected]https://sourceware.org/bugzilla/show_bug.cgi?id=32829 · [email protected]https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=6c3458a8b7ee7d39f070c7b2350851cb2110c65a · [email protected]https://vuldb.com/?ctiid.310347 · [email protected]https://vuldb.com/?id.310347 · [email protected]https://vuldb.com/?submit.584635 · [email protected]https://www.gnu.org/ · [email protected]https://cert-portal.siemens.com/productcert/html/ssa-082556.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-265688.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 27 MAY 14:31Z
    GNU Binutils objdump debug.c debug_type_samep memory corruption
    cvelistv5