CVE-2025-69648: GNU Binutils

Medium severity, CVSS 6.2. EPSS: 0.2% chance of exploitation in the next 30 days.

GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF .debug_rnglists data. A logic flaw in the DWARF parsing path causes readelf to repeatedly print the same warning message without making forward progress, resulting in a non-terminating output loop that requires manual interruption. No evidence of memory corruption or code execution was observed.

Affected products

• GNU Binutils: up to and including 2.45.1

Published 2026-03-09. Last modified 2026-06-17.