CVE-2025-7545 GNU Binutils objcopy.c copy_section heap-based overflow
A heap-based buffer overflow in GNU Binutils objcopy allows local attackers to execute arbitrary code or cause denial of service via crafted input.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-7545?
CVE-2025-7545 is a medium-severity memory corruption vulnerability in Gnu Binutils, published on 13 Jul 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A vulnerability classified as problematic was found in GNU Binutils 2.45. Affected by this vulnerability is the function copy_section of the file binutils/objcopy.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The patch is named 08c3cbe5926e4d355b5cb70bbec2b1eeb40c2944. It is recommended to apply a patch to fix this issue.
Which versions are affected by CVE-2025-7545?
It affects 1 product.
Products include Gnu Binutils.
How do I fix CVE-2025-7545?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2025-7545 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-7545 exists.
Public exploit code: 1 proofs of concept on GitHub.
Other vulnerabilities in Gnu Binutils
Sources
Also known as AZL-65352, AZL-65384, BELL-CVE-2025-7545, CLSA-2025-1757015268, CLSA-2026-1776691972, CLSA-2026-1777466211 and 16 more.