CVE-2025-3198

LOW

GNU Binutils - Memory Leak

Title source: rule

Description

A vulnerability has been found in GNU Binutils 2.43/2.44 and classified as problematic. Affected by this vulnerability is the function display_info of the file binutils/bucomm.c of the component objdump. The manipulation leads to memory leak. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The patch is named ba6ad3a18cb26b79e0e3b84c39f707535bbc344d. It is recommended to apply a patch to fix this issue.

References (7)

[Product] https://www.gnu.org/

[Broken Link] https://sourceware.org/bugzilla/show_bug.cgi?id=32716

[Issue Tracking] https://sourceware.org/bugzilla/show_bug.cgi?id=32716#c0

[Broken Link] https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ba6ad3a18cb26b79e0e3b84c39f707535bbc344d

[Permissions Required, VDB Entry] https://vuldb.com/?ctiid.303151

[Third Party Advisory, VDB Entry] https://vuldb.com/?id.303151

[Exploit, Third Party Advisory, VDB Entry] https://vuldb.com/?submit.545773

Scores

CVSS v3 3.3

EPSS 0.0007

EPSS Percentile 20.8%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Classification

CWE

CWE-401 CWE-404

Status published

Affected Products (2)

gnu/binutils

gnu/binutils

Timeline

Published Apr 04, 2025

Tracked Since Feb 18, 2026