CVE-2025-69645: GNU Binutils

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug information. A logic error in the handling of DWARF compilation units can result in an invalid offset_size value being used inside byte_get_little_endian, leading to an abort (SIGABRT). The issue was observed in binutils 2.44. A local attacker can trigger the crash by supplying a malicious input file.

Affected products

• GNU Binutils: version 2.44 only

Published 2026-03-06. Last modified 2026-06-17.