CVE-2025-0840: GNU Binutils objdump.c disassemble_bytes stack-based overflow
A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. This affects the function disassemblebytes of the file binutils/objdump.c. The manipulation of the argument buf leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 2.44 is able to address this issue. The identifier of the patch is baac6c221e9d69335bf41366a1c7d87d8ab2f893. It is recommended to upgrade the affected component.
Other sources
GNU Binutils objdump.c disassemblebytes stack-based overflow
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/binutilsto a version that resolves this vulnerability.Fixed in 2.44-3 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 2.37-11 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 2.41-4 - Upgrade
Upgrade
GNU Binutilsto a version that resolves this vulnerability.Fixed in 2.44 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch baac6c221e9d69335bf41366a1c7d87d8ab2f893
Event History
Frequently Asked Questions
What is the severity of CVE-2025-0840?
CVE-2025-0840 is classified as problematic due to its potential for stack-based buffer overflow leading to arbitrary code execution.
How do I fix CVE-2025-0840?
To fix CVE-2025-0840, update GNU Binutils to a version later than 2.43, as this version contains the vulnerability.
What components are affected by CVE-2025-0840?
CVE-2025-0840 affects the disassemble_bytes function in the binutils/objdump.c file of GNU Binutils up to version 2.43.
Can CVE-2025-0840 be exploited remotely?
Yes, CVE-2025-0840 can potentially be exploited remotely if an attacker can manipulate the argument buf during the disassembly process.
What are the potential impacts of exploiting CVE-2025-0840?
Exploiting CVE-2025-0840 may lead to a stack-based buffer overflow, which can result in arbitrary code execution or system compromise.