Logo
vulnerabilityCVE-2025-8225
Name
CVE-2025-8225
Source
NVD ( link)Debian ( link)
Description
A vulnerability was found in GNU Binutils 2.44 and classified as problematic. This issue affects the function process_debug_info of the file binutils/dwarf.c of the component DWARF Section Handler. The manipulation leads to memory leak. Attacking locally is a requirement. The identifier of the patch is e51fdff7d2e538c0e5accdd65649ac68e6e0ddd4. It is recommended to apply a patch to fix this issue.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis

Vulnerability Ratings#


1.9
CVSSv4
3.3
CVSSv31
1.7
CVSSv2
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
master
2.45.1
Not Affected
openwrt
master
2.46.0-r1
Not Affected
openwrt
openwrt-25.12
2.45.1-r1
Not Affected
yocto
kirkstone
2.38
Patched
yocto
master
2.46.1
Not Affected
yocto
scarthgap
2.42
Patched

Resolved with patches#


binutils (yocto:kirkstone)

#
Title
Author
Resolve
1
binutils/dwarf.c debug_information leak
Alan Modra <amodra@gmail.com>
CVE-2025-8225

binutils (yocto:scarthgap)

#
Title
Author
Resolve
1
binutils/dwarf.c debug_information leak
Alan Modra <amodra@gmail.com>
CVE-2025-8225