CVE-2025-3198: GNU Binutils objdump bucomm.c display_info memory leak
A vulnerability has been found in GNU Binutils 2.43/2.44 and classified as problematic. Affected by this vulnerability is the function displayinfo of the file binutils/bucomm.c of the component objdump. The manipulation leads to memory leak. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The patch is named ba6ad3a18cb26b79e0e3b84c39f707535bbc344d. It is recommended to apply a patch to fix this issue.
Other sources
GNU Binutils objdump bucomm.c displayinfo memory leak
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
GNU Binutils objdump (binutils/bucomm.c display_info)to a version that resolves this vulnerability.Patch ba6ad3a18cb26b79e0e3b84c39f707535bbc344d
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3198?
The severity of CVE-2025-3198 is classified as problematic due to its potential to cause a memory leak.
How do I fix CVE-2025-3198?
To fix CVE-2025-3198, update GNU Binutils to a version later than 2.44.
What components are affected by CVE-2025-3198?
CVE-2025-3198 affects the display_info function in the objdump component of GNU Binutils.
Can CVE-2025-3198 be exploited remotely?
No, CVE-2025-3198 requires local access for exploitation.
What versions of GNU Binutils are affected by CVE-2025-3198?
GNU Binutils versions 2.43 and 2.44 are affected by CVE-2025-3198.