CVE-2025-69648: Medium severity GNU binutils vulnerability
GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF .debugrnglists data. A logic flaw in the DWARF parsing path causes readelf to repeatedly print the same warning message without making forward progress, resulting in a non-terminating output loop that requires manual interruption. No evidence of memory corruption or code execution was observed.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-69648?
CVE-2025-69648 is classified as a denial-of-service vulnerability that affects GNU Binutils versions up to 2.45.1.
How do I fix CVE-2025-69648?
To fix CVE-2025-69648, upgrade GNU Binutils to a version later than 2.45.1 where the vulnerability is addressed.
What is the impact of CVE-2025-69648?
The impact of CVE-2025-69648 is that it can cause readelf to enter an unresponsive state when processing a crafted binary.
Which versions of GNU Binutils are affected by CVE-2025-69648?
GNU Binutils versions up to and including 2.45.1 are affected by CVE-2025-69648.
What kind of vulnerability is CVE-2025-69648?
CVE-2025-69648 is a denial-of-service vulnerability due to a logic flaw in DWARF parsing.