CVE-2025-5245 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Binutils
Severity
4.8MEDIUMNVD
GHSA7.9
EPSS
0.1%
top 75.56%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMay 27
Latest updateDec 1
Description
A vulnerability classified as critical has been found in GNU Binutils up to 2.44. This affects the function debug_type_samep of the file /binutils/debug.c of the component objdump. The manipulation leads to memory corruption. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue.
CVSS vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Affected Packages4 packages
🔴Vulnerability Details
5GHSA▶
Hibernate Validator may interpolate user-supplied input in a constraint violation message with Expression Language↗2025-06-03
GHSA▶
GHSA-h92g-mrpv-x8v2: A vulnerability classified as critical has been found in GNU Binutils up to 2↗2025-05-27
OSV▶
CVE-2025-5245: A vulnerability classified as critical has been found in GNU Binutils up to 2↗2025-05-27