Logo
vulnerabilityCVE-2025-5245
Name
CVE-2025-5245
Source
NVD ( link)Debian ( link)
Description
A vulnerability classified as critical has been found in GNU Binutils up to 2.44. This affects the function debug_type_samep of the file /binutils/debug.c of the component objdump. The manipulation leads to memory corruption. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
binutils
Exploitable

Vulnerability Ratings#


4.8
CVSSv4
5.3
CVSSv31
7.8
CVSSv31
4.3
CVSSv2
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
master
2.45.1
Not Affected
openwrt
master
2.46.0-r1
Not Affected
openwrt
openwrt-25.12
2.45.1-r1
Not Affected
yocto
kirkstone
2.38
Patched
yocto
master
2.46.1
Not Affected
yocto
scarthgap
2.42
Patched

Resolved with patches#


binutils (yocto:kirkstone)

#
Title
Author
Resolve
1
Patch #1
Alan Modra <amodra@gmail.com>
CVE-2025-5245

binutils (yocto:scarthgap)

#
Title
Author
Resolve
1
Patch #1
Alan Modra <amodra@gmail.com>
CVE-2025-5245