CVEvulnerability

CVE-2025-69644

5.0 MEDIUM Published 2026-03-06 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2026-03-06
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
5.0 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
Weaknesses
CWE-400

Description

An issue was discovered in Binutils before 2.46. The objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed debug information. A logic flaw in the handling of DWARF location list headers can cause objdump to enter an unbounded loop and produce endless output until manually interrupted. This issue affects versions prior to the upstream fix and allows a local attacker to cause excessive resource consumption by supplying a malicious input file.

Affected configurations

• gnu binutils (< 2.46)

Related

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References