CVE-2025-3198

low-risk
Published 2025-04-04

A vulnerability has been found in GNU Binutils 2.43/2.44 and classified as problematic. Affected by this vulnerability is the function display_info of the file binutils/bucomm.c of the component objdump. The manipulation leads to memory leak. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The patch is named ba6ad3a18cb26b79e0e3b84c39f707535bbc344d. It is recommended to apply a patch to fix this issue.

Do I need to act?

-
0.07% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
3
CVSS 3.3/10 Low
LOCAL / LOW complexity

Affected Products (2)

Affected Vendors

Gnu

References (8)

Broken Link https://sourceware.org/bugzilla/show_bug.cgi?id=32716
Issue Tracking https://sourceware.org/bugzilla/show_bug.cgi?id=32716#c0
Broken Link https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ba6ad3a18cb26b79e0e3b...
Permissions Required https://vuldb.com/?ctiid.303151
Third Party Advisory https://vuldb.com/?id.303151
Exploit https://vuldb.com/?submit.545773
Product https://www.gnu.org/
Broken Link https://sourceware.org/bugzilla/show_bug.cgi?id=32716
20
/ 100
low-risk
Severity 13/34 · Low
Exploitability 0/34 · Minimal
Exposure 7/34 · Low