CVE-2025-7545: GNU Binutils objcopy.c copy_section heap-based overflow

Published Jul 13, 2025

Updated

A vulnerability classified as problematic was found in GNU Binutils 2.45. Affected by this vulnerability is the function copysection of the file binutils/objcopy.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The patch is named 08c3cbe5926e4d355b5cb70bbec2b1eeb40c2944. It is recommended to apply a patch to fix this issue.

Affected Software

2 affected components

GNU binutils

GNU binutils=2.45

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade GNU Binutils to a version that resolves this vulnerability.
Patch 08c3cbe5926e4d355b5cb70bbec2b1eeb40c2944

Event History

Jul 13, 2025

CVE Published

via MITRE·09:44 PM

Data Sourced

via MITRE·09:44 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·10:15 PM

DescriptionSeverityWeaknessAffected Software

Jun 10, 57589

Event

via FIRST·01:50 PM

Frequently Asked Questions

What is the severity of CVE-2025-7545?

CVE-2025-7545 is classified as a problematic vulnerability due to the potential for a heap-based buffer overflow.

How do I fix CVE-2025-7545?

To mitigate CVE-2025-7545, update to a patched version of GNU Binutils that addresses the buffer overflow issue.

Who is affected by CVE-2025-7545?

CVE-2025-7545 affects users of GNU Binutils version 2.45.

What type of vulnerability is CVE-2025-7545?

CVE-2025-7545 is a heap-based buffer overflow vulnerability.

Can CVE-2025-7545 be exploited remotely?

No, exploiting CVE-2025-7545 requires local access to the vulnerable system.