Maple Labs

CVE search · CVE-2025-69644

CVE-2025-69644

medium 5.0

An issue was discovered in Binutils before 2.46. The objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed debug information. A logic flaw in the handling of DWARF location list headers can cause objdump to enter an unbounded loop and produce endless output until manually interrupted. This issue affects versions prior to the upstream fix and allows a local attacker to cause excessive resource consumption by supplying a malicious input file.

Open in the NVD CVE.org JSON

Details

Status
Analyzed
Published
Last changed
Source
cve@mitre.org
Weakness
CWE-400

Severity

VersionScoreVectorSource
CVSS 3.1 medium 5.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H 134c704f-9b21-4f2e-91b3-4a467353bcc0Secondary

Affected products

Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.

  • gnu · binutils

References