Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug information. A logic error in the handling of DWARF compilation units can result in an invalid offset_size value being used inside byte_get_little_endian, leading to an abort (SIGABRT). The issue was observed in binutils 2.44. A local attacker can trigger the crash by supplying a malicious input file.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Gnu |
|
No data.
No data.
References
History
Mon, 09 Mar 2026 10:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Gnu
Gnu binutils |
|
| Vendors & Products |
Gnu
Gnu binutils |
Sat, 07 Mar 2026 00:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | binutils: Binutils objdump: Denial of Service via crafted DWARF debug information | |
| Weaknesses | CWE-1285 | |
| References |
| |
| Metrics |
threat_severity
|
cvssV3_1
|
Fri, 06 Mar 2026 17:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug information. A logic error in the handling of DWARF compilation units can result in an invalid offset_size value being used inside byte_get_little_endian, leading to an abort (SIGABRT). The issue was observed in binutils 2.44. A local attacker can trigger the crash by supplying a malicious input file. | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2026-03-06T00:00:00.000Z
Updated: 2026-03-06T17:14:29.543Z
Reserved: 2026-01-09T00:00:00.000Z
Link: CVE-2025-69645
Vulnrichment
No data.
NVD
Status : Awaiting Analysis
Published: 2026-03-06T18:16:16.367
Modified: 2026-03-09T13:35:34.633
Link: CVE-2025-69645
Redhat