CVE-2025-3198

A vulnerability has been found in GNU Binutils 2.43/2.44 and classified as problematic. Affected by this vulnerability is the function display_info of the file binutils/bucomm.c of the component objdump. The manipulation leads to memory leak. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The patch is named ba6ad3a18cb26b79e0e3b84c39f707535bbc344d. It is recommended to apply a patch to fix this issue.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:gnu:binutils:2.43:*:*:*:*:*:*:*
cpe:2.3:a:gnu:binutils:2.44:*:*:*:*:*:*:*

History

15 May 2025, 19:46

Type Values Removed Values Added
First Time Gnu binutils
Gnu
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.5
CPE cpe:2.3:a:gnu:binutils:2.43:*:*:*:*:*:*:*
cpe:2.3:a:gnu:binutils:2.44:*:*:*:*:*:*:*
References () https://www.gnu.org/ - () https://www.gnu.org/ - Product
References () https://sourceware.org/bugzilla/show_bug.cgi?id=32716 - () https://sourceware.org/bugzilla/show_bug.cgi?id=32716 - Broken Link
References () https://vuldb.com/?id.303151 - () https://vuldb.com/?id.303151 - Third Party Advisory, VDB Entry
References () https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ba6ad3a18cb26b79e0e3b84c39f707535bbc344d - () https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ba6ad3a18cb26b79e0e3b84c39f707535bbc344d - Broken Link
References () https://sourceware.org/bugzilla/show_bug.cgi?id=32716#c0 - () https://sourceware.org/bugzilla/show_bug.cgi?id=32716#c0 - Issue Tracking
References () https://vuldb.com/?ctiid.303151 - () https://vuldb.com/?ctiid.303151 - Permissions Required, VDB Entry
References () https://vuldb.com/?submit.545773 - () https://vuldb.com/?submit.545773 - Exploit, VDB Entry, Third Party Advisory
CWE CWE-401

04 Apr 2025, 21:15

Type Values Removed Values Added
CWE CWE-401
CWE-404
CVSS v2 : unknown
v3 : 3.3
v2 : unknown
v3 : unknown

04 Apr 2025, 02:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-04-04 02:15

Updated : 2025-05-15 19:46


NVD link : CVE-2025-3198

Mitre link : CVE-2025-3198


JSON object : View

Products Affected

gnu

  • binutils
CWE
CWE-401

Missing Release of Memory after Effective Lifetime