CVE-2025-0840: GNU Binutils objdump.c disassemble_bytes stack-based overflow
First published: Wed Jan 29 2025(Updated: )
A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. This affects the function disassemble_bytes of the file binutils/objdump.c. The manipulation of the argument buf leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 2.44 is able to address this issue. The identifier of the patch is baac6c221e9d69335bf41366a1c7d87d8ab2f893. It is recommended to upgrade the affected component.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ubuntu/binutils | <=2.43 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://vuldb.com/?id.293997
- https://vuldb.com/?ctiid.293997
- https://vuldb.com/?submit.485255
- https://sourceware.org/bugzilla/show_bug.cgi?id=32560
- https://sourceware.org/bugzilla/attachment.cgi?id=15882
- https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=baac6c221e9d69335bf41366a1c7d87d8ab2f893
- https://www.gnu.org/
Frequently Asked Questions
What is the severity of CVE-2025-0840?
CVE-2025-0840 is classified as problematic due to its potential for stack-based buffer overflow leading to arbitrary code execution.
How do I fix CVE-2025-0840?
To fix CVE-2025-0840, update GNU Binutils to a version later than 2.43, as this version contains the vulnerability.
What components are affected by CVE-2025-0840?
CVE-2025-0840 affects the disassemble_bytes function in the binutils/objdump.c file of GNU Binutils up to version 2.43.
Can CVE-2025-0840 be exploited remotely?
Yes, CVE-2025-0840 can potentially be exploited remotely if an attacker can manipulate the argument buf during the disassembly process.
What are the potential impacts of exploiting CVE-2025-0840?
Exploiting CVE-2025-0840 may lead to a stack-based buffer overflow, which can result in arbitrary code execution or system compromise.
- collector/mitre-cve
- source/MITRE
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- agent/references
- agent/title
- agent/weakness
- agent/severity
- agent/author
- agent/source
- agent/type
- agent/description
- agent/first-publish-date
- agent/event
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/gnu
- canonical/ubuntu/binutils