CVE-2025-5245 GNU Binutils objdump debug.c debug_type_samep memory corruption

What is CVE-2025-5245?

CVE-2025-5245 is a medium-severity memory corruption vulnerability in Gnu Binutils, published on 27 May 2025. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

A vulnerability classified as critical has been found in GNU Binutils up to 2.44. This affects the function debug_type_samep of the file /binutils/debug.c of the component objdump. The manipulation leads to memory corruption. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue.

Weakness: CWE-119

Which versions are affected by CVE-2025-5245?

It affects 1 product.

Products include Gnu Binutils.

How do I fix CVE-2025-5245?

Apply the vendor's patch.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2025-5245 being exploited?

There is no known exploitation of CVE-2025-5245 in the wild and no public exploit code.

Other vulnerabilities in Gnu Binutils

• CVE-2017-7614 Null dereference in n/a Critical 9.8
• CVE-2014-9939 Memory corruption in n/a Critical 9.8
• CVE-2017-7226 Information disclosure in n/a Critical 9.1
• CVE-2017-6969 Information disclosure in n/a Critical 9.1
• CVE-2020-19726 Denial of service in n/a High 8.8

All Gnu Binutils vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as ALPINE-CVE-2025-5245, AZL-61983, AZL-61988, BELL-CVE-2025-5245, DEBIAN-CVE-2025-5245, ECHO-ce84-fabc-3ae3 and 6 more.