CVE-2025-69645

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-69645
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-69645.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-69645
Downstream
Published
2026-03-06T00:00:00Z
Modified
2026-07-15T01:49:19.391948607Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug information. A logic error in the handling of DWARF compilation units can result in an invalid offsetsize value being used inside bytegetlittleendian, leading to an abort (SIGABRT). The issue was observed in binutils 2.44. A local attacker can trigger the crash by supplying a malicious input file.

Database specific 
{
    "cna_assigner": "mitre",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/69xxx/CVE-2025-69645.json"
}
References

Affected packages

Git / sourceware.org/git/binutils-gdb.git

Affected ranges

Type
GIT
Repo
https://sourceware.org/git/binutils-gdb.git
Events
Introduced
815d9a14cbbb3b81843f7566222c87fb22e7255d
Last affected
815d9a14cbbb3b81843f7566222c87fb22e7255d
Database specific 
{
    "extracted_events": [
        {
            "introduced": "2.44"
        },
        {
            "last_affected": "2.44"
        }
    ],
    "cpe": "cpe:2.3:a:gnu:binutils:2.44:*:*:*:*:*:*:*",
    "source": "CPE_STRING"
}

Affected versions

2.*
2.44
Other
binutils-2_44

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-69645.json"