CVE-2025-0840mediumCWE-119CWE-121

CVE-2025-0840: fallo de gravedad media en GNU Binutils

GNU Binutils objdump.c disassemble_bytes stack-based overflow

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Binutils+ Monitorear binutils

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 6.3epss 0.8%
A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. This affects the function disassemble_bytes of the file binutils/objdump.c. The manipulation of the argument buf leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 2.44 is able to address this issue. The identifier of the patch is baac6c221e9d69335bf41366a1c7d87d8ab2f893. It is recommended to upgrade the affected component.
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Productos afectados
GNU · Binutils
CVEs relacionadas — GNU Binutils

En el mismo producto, de las más peligrosas a las menos.

CVE-2025-1153LOWGNU Binutils format.c bfd_set_format memory corruptionEPSS 1.4%CVE-2025-1178MEDIUMGNU Binutils ld libbfd.c bfd_putl64 memory corruptionEPSS 0.8%CVE-2025-1181LOWGNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec memory corruptionEPSS 0.7%CVE-2025-1180LOWGNU Binutils ld elf-eh-frame.c _bfd_elf_write_section_eh_frame memory corruptionEPSS 0.7%CVE-2025-1176LOWGNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec heap-based overflowEPSS 0.7%CVE-2025-1147LOWGNU Binutils nm nm.c internal_strlen buffer overflowEPSS 0.7%