CVE-2025-69648Disclosure(gnu / binutils)

LOWCVSS 6.2 · MEDIUM

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF .debug_rnglists data. A logic flaw in the DWARF parsing path causes readelf to repeatedly print the same warning message without making forward progress, resulting in a non-terminating output loop that requires manual interruption. No evidence of memory corruption or code execution was observed.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-835

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • binutils

Threat summary

  • 3 mentions across 1 observed day

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 3 classified signals
  • 3 total mentions across 1 day

Affected systems

Vendors
Products
binutils

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-03-09: 3Technical Details · 2026-03-09: 303-09
Signal classification1 categories
Disclosure
3100.0%
Referenced assets3 URLs
Full discourse3 posts
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2025-69648 GNU Binutils readelf Denial-of-Service via Malformed DWARF .debug_rnglists Data https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-69648

    Post summary

    A new DoS vulnerability in GNU Binutils readelf was disclosed, caused by malformed DWARF .debug_rnglists data.

    0001141
    4.0K followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2025-69648 GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF .debug_rnglists data. A logic flaw i… https://www.cve.org/CVERecord?id=CVE-2025-69648 ----- Traducción: CVE-2025-69648 GNU… http://infoflow.cloud`

    Post summary

    The text announces a new denial‑of‑service vulnerability (CVE‑2025‑69648) in GNU Binutils readelf due to malformed DWARF data, linking to the CVE record but providing no PoC, exploit, or patch information.

    0000076
    56 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2025-69648 GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF .debug_rnglists data. A logic flaw i… https://www.cve.org/CVERecord?id=CVE-2025-69648

    Post summary

    The post announces a denial‑of‑service vulnerability in GNU Binutils readelf triggered by malformed DWARF data, providing technical details but no PoC, exploit, patch, or evidence of active exploitation.

    00000201
    56.6K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appgnubinutils---

Explore more