AZL-79562
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-79562.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-79562
- Upstream
- Published
- 2026-03-06T19:16:10Z
- Modified
- 2026-04-21T04:34:47.043209Z
- Summary
- CVE-2025-69650 affecting package binutils 2.41-10
- Details
-
GNU Binutils thru 2.46 readelf contains a double free vulnerability when processing a crafted ELF binary with malformed relocation data. During GOT relocation handling, dumprelocations may return early without initializing the allrelocations array. As a result, processgotsectioncontents() may pass an uninitialized rsymbol pointer to free(), leading to a double free and terminating the program with SIGABRT. No evidence of exploitable memory corruption or code execution was observed; the impact is limited to denial of service.
- References