{"attribution":"This product uses data from the NVD API but is not endorsed or certified by the NVD.","cve":{"id":"CVE-2025-69648","sourceIdentifier":"cve@mitre.org","published":"2026-03-09T15:15:52.210","lastModified":"2026-06-17T10:00:48.217","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF .debug_rnglists data. A logic flaw in the DWARF parsing path causes readelf to repeatedly print the same warning message without making forward progress, resulting in a non-terminating output loop that requires manual interruption. No evidence of memory corruption or code execution was observed."},{"lang":"es","value":"GNU Binutils hasta la versión 2.45.1 readelf contiene una vulnerabilidad de denegación de servicio al procesar un binario manipulado con datos DWARF .debug_rnglists malformados. Un fallo lógico en la ruta de análisis DWARF provoca que readelf imprima repetidamente el mismo mensaje de advertencia sin avanzar, lo que resulta en un bucle de salida no terminante que requiere interrupción manual. No se observó evidencia de corrupción de memoria ni ejecución de código."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":6.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.5,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-03-10T13:33:59.800017Z","id":"CVE-2025-69648","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-835"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*","versionEndIncluding":"2.45.1","matchCriteriaId":"A5636F25-118E-4BA7-9A62-6AFCC5CF7FC9"}]}]}],"references":[{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33641","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=598704a00cbac5e85c2bedd363357b5bf6fcee33","source":"cve@mitre.org","tags":["Patch"]}]}}