CVE-2025-69644
Published: Mar 6, 2026Updated: Mar 6, 2026 Sources: CVE List NVD BDU
Description
An issue was discovered in Binutils before 2.46. The objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed debug information. A logic flaw in the handling of DWARF location list headers can cause objdump to enter an unbounded loop and produce endless output until manually interrupted. This issue affects versions prior to the upstream fix and allows a local attacker to cause excessive resource consumption by supplying a malicious input file.
No summary for this CVE yet.
CVSS Vector Breakdown
Exploitability
AV:LAttack VectorLocal
AC:LAttack ComplexityLow
PR:LPrivileges RequiredLow
UI:RUser InteractionRequired
Scope
S:UScopeUnchanged
Impact
C:NConfidentialityNone
I:NIntegrityNone
A:HAvailabilityHigh
Affected Products
GNU General Public License
oss-project·USaka gnu gpl, gpl
ООО «Ред Софт»
commercial·RUaka red soft
Red Hat Inc.
commercial·USaka red hat
and 1 more affected products View all →
Exploitability
Official Patch Available
References
https://sourceware.org/bugzilla/show_bug.cgi?id=33639
sourceware.org
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=455446bbdc8675f34808187de2bbad4682016ff7
sourceware.org
https://redos.red-soft.ru/search/?iblock_id=24&q=CVE-2025-69644
redos.red-soft.ru
and 3 more references View all →
Unlock Complete Vulnerability Intelligence
Get the full picture for CVE-2025-69644 and every CVE in our database. Create a free account — no credit card required.
Create Free AccountPlain-language analysis
Impact assessment and exploitation scenario in plain English
Attack graph visualization
Interactive attack path and kill chain mapping
Exploit details & PoC links
ExploitDB, Metasploit, GitHub PoCs with direct links
Nuclei scanner templates
Ready-to-use vulnerability scanner templates
Full remediation guide
Patch instructions, workarounds, and compliance impact
Interactive AI chat
Ask questions about this vulnerability in natural language
Related vulnerabilities
Semantically similar CVEs and attack patterns
REST API & MCP access
Integrate vulnerability data into your workflows