CVE-2025-66863
published 2025-12-29CVE-2025-66863: An issue was discovered in function d_discriminator in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file.
PriorityP433high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
0.32%
24.7th percentile
An issue was discovered in function d_discriminator in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | binutils | — | — |
| gnu | binutils | — | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
osv7.5HIGH
vendor_debian7.5LOW
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2025-66863: An issue was discovered in function d_discriminator in file cp-demangle
osv·2025-12-29·CVSS 7.5
CVE-2025-66863 [HIGH] CVE-2025-66863: An issue was discovered in function d_discriminator in file cp-demangle
An issue was discovered in function d_discriminator in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file.
GHSA
GHSA-vphr-3984-5c8w: An issue was discovered in function d_discriminator in file cp-demangle
ghsa_unreviewed·2025-12-29
CVE-2025-66863 [HIGH] CWE-400 GHSA-vphr-3984-5c8w: An issue was discovered in function d_discriminator in file cp-demangle
An issue was discovered in function d_discriminator in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file.
Red Hat
binutils: BinUtils: Denial of Service via crafted PE file
vendor_redhat·2025-12-29·CVSS 7.5
CVE-2025-66863 [HIGH] CWE-125 binutils: BinUtils: Denial of Service via crafted PE file
binutils: BinUtils: Denial of Service via crafted PE file
An issue was discovered in function d_discriminator in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file.
A flaw was found in BinUtils. Attackers can exploit this vulnerability by providing a specially crafted Portable Executable (PE) file. This can lead to a denial of service, making the affected application unavailable.
Statement: This vulnerability is rated Low for Red Hat products. The flaw in BinUtils allows for a denial of service when processing a specially crafted Portable Executable (PE) file. For a successful attack to take place the user needs to be tricked to process the maliciously crafted PE binary using the affected program. The consequences of a successful attack
Debian
CVE-2025-66863: binutils - An issue was discovered in function d_discriminator in file cp-demangle.c in Bin...
vendor_debian·2025·CVSS 7.5
CVE-2025-66863 [HIGH] CVE-2025-66863: binutils - An issue was discovered in function d_discriminator in file cp-demangle.c in Bin...
An issue was discovered in function d_discriminator in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file.
Scope: local
bookworm: open
bullseye: open
forky: open
sid: open
trixie: open
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2025-66863 binutils: BinUtils: Denial of Service via crafted PE file
bugzilla·2025-12-29·CVSS 7.5
CVE-2025-66863 [HIGH] CVE-2025-66863 binutils: BinUtils: Denial of Service via crafted PE file
CVE-2025-66863 binutils: BinUtils: Denial of Service via crafted PE file
An issue was discovered in function d_discriminator in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file.
Wiz
CVE-2025-66863 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 7.5
CVE-2025-66863 [HIGH] CVE-2025-66863 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2025-66863 :
NixOS vulnerability analysis and mitigation
An issue was discovered in function d_discriminator in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file.
Source : NVD
## 7.5
Score
Published December 29, 2025
Severity HIGH
CNA Score 7.5
Affected Technologies
NixOS
Wolfi
Has Public Exploit Yes
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 22.8
Exploitation Probability (EPSS) 0.1
Affected packages and libraries
gcc-toolset-15-binutils
gcc-toolset-15-binutils-devel
Sources
NVD
Chainguard No Fix Added at: Jan 15, 2026
Debian 11, 12, 13, 14 Severity LOW No Fix Added at: Dec 30, 2025
Echo Severity HIGH Has Fix Added at: Dec 30, 2025
H
2025-12-29
Published