A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. This affects the function disassemble_bytes of the file binutils/objdump.c. The manipulation of the argument buf leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 2.44 is able to address this issue. The identifier of the patch is baac6c221e9d69335bf41366a1c7d87d8ab2f893. It is recommended to upgrade the affected component.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade binutils | Aug 8, 2025 | Jan 29, 2025 |
| Amazon Linux Ami 2 | — | Upgrade binutils-debuginfoUpgrade gcc10-binutils-develUpgrade gcc10-binutils-debuginfoUpgrade gcc10-binutils-goldUpgrade gcc10-binutilsUpgrade binutils-develUpgrade binutils | Mar 10, 2025 | Jan 29, 2025 |
| Amazon_linux_2023 | — | Upgrade binutils-develUpgrade binutils-gprofng-debuginfoUpgrade binutils-debugsourceUpgrade binutilsUpgrade binutils-debuginfoUpgrade binutils-gprofng | Mar 10, 2025 | Jan 29, 2025 |
| Debian | — | Upgrade binutils | May 15, 2025 | Jan 29, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade binutils | May 13, 2025 | Jan 29, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade binutils | Apr 11, 2025 | Jan 29, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade binutils | May 7, 2025 | Jan 29, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade binutils | Apr 1, 2025 | Jan 29, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 29, 2025 |
| Suse | — | Upgrade cross-hppa64-binutilsUpgrade cross-rx-binutilsUpgrade cross-s390x-binutilsUpgrade cross-bpf-binutilsUpgrade libctf0Upgrade libucp-develUpgrade cross-ppc64le-binutilsUpgrade binutils-develUpgrade cross-loongarch64-binutilsUpgrade perf-gtkUpgrade cross-arm-binutilsUpgrade bpftool-bash-completionUpgrade cross-spu-binutilsUpgrade binutilsUpgrade cross-avr-binutilsUpgrade cross-aarch64-binutilsUpgrade cross-ia64-binutilsUpgrade libuct0Upgrade libucp0Upgrade libucs0Upgrade cross-sparc64-binutilsUpgrade perf-bash-completionUpgrade bpftoolUpgrade cross-ppc-binutilsUpgrade openucx-toolsUpgrade perfUpgrade cross-epiphany-binutilsUpgrade cross-sparc-binutilsUpgrade cross-riscv64-binutilsUpgrade cross-s390-binutilsUpgrade cross-m68k-binutilsUpgrade libuct-develUpgrade cross-ppc64-binutilsUpgrade libucs-develUpgrade gprofngUpgrade libctf-nobfd0Upgrade libucm0Upgrade perf-develUpgrade libucm-develUpgrade cross-i386-binutilsUpgrade binutils-devel-32bitUpgrade cross-x86_64-binutilsUpgrade cross-mips-binutilsUpgrade cross-hppa-binutilsUpgrade cross-pru-binutilsUpgrade cross-xtensa-binutils | Nov 17, 2025 | Nov 14, 2025 |
| Ubuntu | — | Upgrade binutils-multiarch (Ubuntu Pro)Upgrade binutilsUpgrade binutils (Ubuntu Pro)Upgrade binutils-multiarch | Feb 27, 2025 | Jan 29, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jan 29, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub