CVE-2025-66861CWE-400denial-of-service

CVE-2025-66861

Low · published December 29, 2025

CVSS v3.1
2.5
EPSS
0%
Percentile
3.5
In the wild
Unconfirmed
What it is

An issue was discovered in function d_unqualified_name in file cp-demangle.c in BinUtils 2.26 allowing attackers to cause a denial of service via crafted PE file.

The record
Technical detail
CVSS v3.1
2.5 · LOW
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00146 · 3.5th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2025-12-29T22:15Z
Affected products (1)
ProductVersionsFixed in
gnu/binutilsall versions—
References (2)
https://github.com/caozhzh/CRGF-Vul/blob/main/cxxfilt/crash1.md · [email protected]https://github.com/caozhzh/CRGF-Vul/blob/main/cxxfilt/crash1.md · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 29 DEC 00:00Z
    An issue was discovered in function d_unqualified_name in file cp-demangle.c in BinUtils 2.26 allowing attackers to cause a denial of service via crafted PE…
    cvelistv5