CVE-2025-8224

LOW

GNU Binutils 2.44 - Null Pointer Dereference in BFD Library

Title source: llm
STIX 2.1

Description

A vulnerability has been found in GNU Binutils 2.44 and classified as problematic. This vulnerability affects the function bfd_elf_get_str_section of the file bfd/elf.c of the component BFD Library. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The name of the patch is db856d41004301b3a56438efd957ef5cabb91530. It is recommended to apply a patch to fix this issue.

References (10)

Core 10
Core References
Third Party Advisory, VDB Entry vdb-entry technical-description
https://vuldb.com/?id.317812
Permissions Required, VDB Entry signature permissions-required
https://vuldb.com/?ctiid.317812
Exploit, Third Party Advisory, VDB Entry third-party-advisory
https://vuldb.com/?submit.621878
Exploit, Issue Tracking issue-tracking
https://sourceware.org/bugzilla/show_bug.cgi?id=32109
Exploit, Issue Tracking issue-tracking
https://sourceware.org/bugzilla/show_bug.cgi?id=32109#c2
Product product
https://www.gnu.org/

Scores

CVSS v3 3.3
EPSS 0.0022
EPSS Percentile 11.8%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-404 CWE-476
Status published
Products (2)
gnu/binutils 2.44
GNU/Binutils 2.44
Published Jul 27, 2025
Tracked Since Feb 18, 2026