CVE-2025-69652
published 2026-03-06CVE-2025-69652: GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT) when processing a crafted ELF binary with malformed DWARF abbrev or…
PriorityP425medium6.2CVSS 3.1
AVLACLPRNUINSUCNINAH
EPSS
0.17%
6.8th percentile
GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT) when processing a crafted ELF binary with malformed DWARF abbrev or debug information. Due to incomplete state cleanup in process_debug_info(), an invalid debug_info_p state may propagate into DWARF attribute parsing routines. When certain malformed attributes result in an unexpected data length of zero, byte_get_little_endian() triggers a fatal abort. No evidence of memory corruption or code execution was observed; the impact is limited to denial of service.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | binutils | — | — |
| gnu | binutils | <= 2.46 | — |
| msrc | azl3_binutils_2.41-10_on_azure_linux_3.0 | — | — |
| msrc | cbl2_binutils_2.37-20_on_cbl_mariner_2.0 | — | — |
CVSS provenance
nvdv3.16.2MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
osv6.2MEDIUM
vendor_debian6.2LOW
vendor_msrc6.2MEDIUM
vendor_redhat6.2MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Microsoft
GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT) when processing a crafted ELF binary with malformed DWARF abbrev or debug information. Due to incomplete state
vendor_msrc·2026-03-10·CVSS 6.2
CVE-2025-69652 [MEDIUM] CWE-460 GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT) when processing a crafted ELF binary with malformed DWARF abbrev or debug information. Due to incomplete state
GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT) when processing a crafted ELF binary with malformed DWARF abbrev or debug information. Due to incomplete state cleanup in process_debug_info(), an invalid debug_info_p state may propagate into DWARF attribute parsing routines. When certain malformed attributes result in an unexpected data length of zero, byte_get_little_endian() triggers a fatal abort. No evidence of memory corruption or code execution was observed; the impact is limited to denial of service.
Mariner: Mariner
mitre: mitre
Customer Action Required: Yes
Red Hat
binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information
vendor_redhat·2026-03-06·CVSS 6.2
CVE-2025-69652 [MEDIUM] CWE-617 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information
binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information
GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT) when processing a crafted ELF binary with malformed DWARF abbrev or debug information. Due to incomplete state cleanup in process_debug_info(), an invalid debug_info_p state may propagate into DWARF attribute parsing routines. When certain malformed attributes result in an unexpected data length of zero, byte_get_little_endian() triggers a fatal abort. No evidence of memory corruption or code execution was observed; the impact is limited to denial of service.
A flaw was found in binutils. Processing a specially crafted ELF binary file containing malformed DWARF abbrev or debug information with the reade
Debian
CVE-2025-69652: binutils - GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (...
vendor_debian·2025·CVSS 6.2
CVE-2025-69652 [MEDIUM] CVE-2025-69652: binutils - GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (...
GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT) when processing a crafted ELF binary with malformed DWARF abbrev or debug information. Due to incomplete state cleanup in process_debug_info(), an invalid debug_info_p state may propagate into DWARF attribute parsing routines. When certain malformed attributes result in an unexpected data length of zero, byte_get_little_endian() triggers a fatal abort. No evidence of memory corruption or code execution was observed; the impact is limited to denial of service.
Scope: local
bookworm: open
bullseye: open
forky: open
sid: open
trixie: open
GHSA
GHSA-c4wj-p3m6-6483: GNU Binutils thru 2
ghsa_unreviewed·2026-03-06
CVE-2025-69652 [MEDIUM] CWE-460 GHSA-c4wj-p3m6-6483: GNU Binutils thru 2
GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT) when processing a crafted ELF binary with malformed DWARF abbrev or debug information. Due to incomplete state cleanup in process_debug_info(), an invalid debug_info_p state may propagate into DWARF attribute parsing routines. When certain malformed attributes result in an unexpected data length of zero, byte_get_little_endian() triggers a fatal abort. No evidence of memory corruption or code execution was observed; the impact is limited to denial of service.
OSV
CVE-2025-69652: GNU Binutils thru 2
osv·2026-03-06·CVSS 6.2
CVE-2025-69652 [MEDIUM] CVE-2025-69652: GNU Binutils thru 2
GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT) when processing a crafted ELF binary with malformed DWARF abbrev or debug information. Due to incomplete state cleanup in process_debug_info(), an invalid debug_info_p state may propagate into DWARF attribute parsing routines. When certain malformed attributes result in an unexpected data length of zero, byte_get_little_endian() triggers a fatal abort. No evidence of memory corruption or code execution was observed; the impact is limited to denial of service.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2025-69652 rizin: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information [fedora-all]
bugzilla·2026-03-16·CVSS 6.2
CVE-2025-69652 [MEDIUM] CVE-2025-69652 rizin: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information [fedora-all]
CVE-2025-69652 rizin: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Discussion:
This bug appears to have been reported against 'rawhide' during the Fedora Linux 45 development cycle.
Changing version to 45.
Bugzilla
CVE-2025-69652 radare2: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information [fedora-all]
bugzilla·2026-03-16·CVSS 6.2
CVE-2025-69652 [MEDIUM] CVE-2025-69652 radare2: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information [fedora-all]
CVE-2025-69652 radare2: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Discussion:
This bug appears to have been reported against 'rawhide' during the Fedora Linux 45 development cycle.
Changing version to 45.
Bugzilla
CVE-2025-69652 mingw-binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information [fedora-all]
bugzilla·2026-03-16·CVSS 6.2
CVE-2025-69652 [MEDIUM] CVE-2025-69652 mingw-binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information [fedora-all]
CVE-2025-69652 mingw-binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Discussion:
FEDORA-2026-9174e6ea37 (mingw-binutils-2.45.1-2.fc43) has been submitted as an update to Fedora 43.
https://bodhi.fedoraproject.org/updates/FEDORA-2026-9174e6ea37
---
FEDORA-2026-9174e6ea37 has been pushed to the Fedora 43 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2026-9174e6ea37`
You can provide feedb
Bugzilla
CVE-2025-69652 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information
bugzilla·2026-03-06·CVSS 6.2
CVE-2025-69652 [MEDIUM] CVE-2025-69652 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information
CVE-2025-69652 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information
GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT) when processing a crafted ELF binary with malformed DWARF abbrev or debug information. Due to incomplete state cleanup in process_debug_info(), an invalid debug_info_p state may propagate into DWARF attribute parsing routines. When certain malformed attributes result in an unexpected data length of zero, byte_get_little_endian() triggers a fatal abort. No evidence of memory corruption or code execution was observed; the impact is limited to denial of service.
Wiz
CVE-2025-69652 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 6.2
CVE-2025-69652 [MEDIUM] CVE-2025-69652 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2025-69652 :
NixOS vulnerability analysis and mitigation
GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT) when processing a crafted ELF binary with malformed DWARF abbrev or debug information. Due to incomplete state cleanup in process_debug_info(), an invalid debug_info_p state may propagate into DWARF attribute parsing routines. When certain malformed attributes result in an unexpected data length of zero, byte_get_little_endian() triggers a fatal abort. No evidence of memory corruption or code execution was observed; the impact is limited to denial of service.
Source : NVD
## 6.2
Score
Published March 6, 2026
Severity MEDIUM
CNA Score 6.2
Affected Technologies
NixOS
Wolfi
Has Public Exploit Yes
Has CISA KEV Exploit No
CISA K
2026-03-06
Published