CVE-2025-8224

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-8224
A vulnerability has been found in GNU Binutils 2.44 and classified as problematic. This vulnerability affects the function bfd_elf_get_str_section of the file bfd/elf.c of the component BFD Library. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The name of the patch is db856d41004301b3a56438efd957ef5cabb91530. It is recommended to apply a patch to fix this issue.

5.5 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://sourceware.org/bugzilla/attachment.cgi?id=15680 Exploit
https://sourceware.org/bugzilla/show_bug.cgi?id=32109 Exploit Issue Tracking
https://sourceware.org/bugzilla/show_bug.cgi?id=32109#c2 Exploit Issue Tracking
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=db856d41004301b3a56438efd957ef5cabb91530 Mailing List
https://vuldb.com/?ctiid.317812 Permissions Required VDB Entry
https://vuldb.com/?id.317812 Third Party Advisory VDB Entry
https://vuldb.com/?submit.621878 Exploit Third Party Advisory VDB Entry
https://www.gnu.org/ Product
Configurations

Configuration 1 (hide)

cpe:2.3:a:gnu:binutils:2.44:*:*:*:*:*:*:*
History

01 Aug 2025, 17:08

Type Values Removed Values Added
First Time Gnu binutils
Gnu
CPE cpe:2.3:a:gnu:binutils:2.44:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : 3.3 		v2 : unknown
v3 : 5.5
References () https://vuldb.com/?submit.621878 - () https://vuldb.com/?submit.621878 - Exploit, Third Party Advisory, VDB Entry
References () https://sourceware.org/bugzilla/show_bug.cgi?id=32109 - () https://sourceware.org/bugzilla/show_bug.cgi?id=32109 - Exploit, Issue Tracking
References () https://vuldb.com/?id.317812 - () https://vuldb.com/?id.317812 - Third Party Advisory, VDB Entry
References () https://www.gnu.org/ - () https://www.gnu.org/ - Product
References () https://sourceware.org/bugzilla/attachment.cgi?id=15680 - () https://sourceware.org/bugzilla/attachment.cgi?id=15680 - Exploit
References () https://vuldb.com/?ctiid.317812 - () https://vuldb.com/?ctiid.317812 - Permissions Required, VDB Entry
References () https://sourceware.org/bugzilla/show_bug.cgi?id=32109#c2 - () https://sourceware.org/bugzilla/show_bug.cgi?id=32109#c2 - Exploit, Issue Tracking
References () https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=db856d41004301b3a56438efd957ef5cabb91530 - () https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=db856d41004301b3a56438efd957ef5cabb91530 - Mailing List

27 Jul 2025, 06:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-07-27 06:15

Updated : 2025-08-01 17:08

NVD link : CVE-2025-8224

Mitre link : CVE-2025-8224

JSON object : View

Products Affected

gnu

  • binutils
CWE
CWE-476

NULL Pointer Dereference

CWE-404

Improper Resource Shutdown or Release