A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. This affects the function disassemble_bytes of the file binutils/objdump.c. The manipulation of the argument buf leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 2.44 is able to address this issue. The identifier of the patch is baac6c221e9d69335bf41366a1c7d87d8ab2f893. It is recommended to upgrade the affected component.
CVSS Details
- CVSS 4.0 Base Score: 6.3 (MEDIUM)
- CVSS 4.0 Vector: (CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade binutils | Aug 8, 2025 | Jan 29, 2025 |
| Amazon Linux Ami 2 | — | Upgrade binutils-debuginfoUpgrade gcc10-binutils-develUpgrade gcc10-binutils-debuginfoUpgrade gcc10-binutilsUpgrade binutils-develUpgrade binutilsUpgrade gcc10-binutils-gold | Mar 10, 2025 | Jan 29, 2025 |
| Amazon_linux_2023 | — | Upgrade binutils-debugsourceUpgrade binutils-develUpgrade binutilsUpgrade binutils-gprofng-debuginfoUpgrade binutils-gprofngUpgrade binutils-debuginfo | Mar 10, 2025 | Jan 29, 2025 |
| Debian | — | No solution existsUpgrade binutils | May 15, 2025 | Jan 29, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade binutils | May 13, 2025 | Jan 29, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade binutils | Apr 11, 2025 | Jan 29, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade binutils | May 7, 2025 | Jan 29, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade binutils | Apr 1, 2025 | Jan 29, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 29, 2025 |
| Suse | — | Upgrade cross-ia64-binutilsUpgrade libuct0Upgrade perf-gtkUpgrade binutilsUpgrade cross-arm-binutilsUpgrade libctf0Upgrade bpftool-bash-completionUpgrade cross-aarch64-binutilsUpgrade libucs0Upgrade libucp-develUpgrade cross-rx-binutilsUpgrade binutils-develUpgrade cross-loongarch64-binutilsUpgrade cross-avr-binutilsUpgrade libucp0Upgrade cross-spu-binutilsUpgrade cross-hppa64-binutilsUpgrade perf-bash-completionUpgrade cross-sparc64-binutilsUpgrade bpftoolUpgrade cross-ppc64le-binutilsUpgrade cross-bpf-binutilsUpgrade cross-s390x-binutilsUpgrade perfUpgrade cross-sparc-binutilsUpgrade cross-m68k-binutilsUpgrade libctf-nobfd0Upgrade libucm0Upgrade cross-mips-binutilsUpgrade cross-xtensa-binutilsUpgrade cross-pru-binutilsUpgrade perf-develUpgrade libucm-develUpgrade cross-x86_64-binutilsUpgrade cross-i386-binutilsUpgrade binutils-devel-32bitUpgrade openucx-toolsUpgrade gprofngUpgrade cross-hppa-binutilsUpgrade cross-epiphany-binutilsUpgrade libuct-develUpgrade libucs-develUpgrade cross-ppc-binutilsUpgrade cross-s390-binutilsUpgrade cross-riscv64-binutilsUpgrade cross-ppc64-binutils | Nov 17, 2025 | Nov 14, 2025 |
| Ubuntu | — | Upgrade binutils-multiarch (Ubuntu Pro)Upgrade binutilsUpgrade binutils (Ubuntu Pro)Upgrade binutils-multiarch | Feb 27, 2025 | Jan 29, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jan 29, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub