CVE-2025-69652: Medium severity GNU binutils vulnerability
GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT) when processing a crafted ELF binary with malformed DWARF abbrev or debug information. Due to incomplete state cleanup in processdebuginfo(), an invalid debuginfop state may propagate into DWARF attribute parsing routines. When certain malformed attributes result in an unexpected data length of zero, bytegetlittleendian() triggers a fatal abort. No evidence of memory corruption or code execution was observed; the impact is limited to denial of service.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-69652?
CVE-2025-69652 has been classified as medium severity due to the potential for denial of service via aborting the process when handling malformed ELF binaries.
How do I fix CVE-2025-69652?
To fix CVE-2025-69652, upgrade to a version of GNU Binutils that is higher than 2.46.
What types of systems are affected by CVE-2025-69652?
CVE-2025-69652 affects systems using GNU Binutils version 2.46 and earlier.
What is the nature of the vulnerability in CVE-2025-69652?
CVE-2025-69652 is a vulnerability that causes a process abort (SIGABRT) when processing crafted ELF binaries with malformed DWARF information.
Is there a workaround for CVE-2025-69652?
There are no known workarounds for CVE-2025-69652; upgrading to a fixed version is the recommended solution.