CVE-2025-7545

MEDIUM

GNU Binutils <2.45 - Heap-based Buffer Overflow

Title source: llm

Description

A vulnerability classified as problematic was found in GNU Binutils 2.45. Affected by this vulnerability is the function copy_section of the file binutils/objcopy.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The patch is named 08c3cbe5926e4d355b5cb70bbec2b1eeb40c2944. It is recommended to apply a patch to fix this issue.

Exploits (1)

nomisec WORKING POC
by alxsourin · poc
https://github.com/alxsourin/Firmware-CVE-2025-7545

References (8)

Scores

CVSS v3 5.3
EPSS 0.0002
EPSS Percentile 4.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Classification

CWE
CWE-119 CWE-122
Status published

Affected Products (1)

gnu/binutils

Timeline

Published Jul 13, 2025
Tracked Since Feb 18, 2026