Log in Start free

Vulnerability · Published Jul 13, 2025 · Assigned by VulDB

CVE-2025-7546GNU Binutils elf.c bfd_elf_set_group_contents out-of-bounds write

Medium 5.3

In plain English

A medium-severity out-of-bounds write in Binutils from GNU. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 11% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.2%top 89.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

A vulnerability, which was classified as problematic, has been found in GNU Binutils 2.45. Affected by this issue is the function bfd_elf_set_group_contents of the file bfd/elf.c. The manipulation leads to out-of-bounds write. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The name of the patch is 41461010eb7c79fee7a9d5f6209accdaac66cc6b. It is recommended to apply a patch to fix this issue.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12binutilsno fix listedDEBIAN-CVE-2025-7546
Debian:13binutilsno fix listedDEBIAN-CVE-2025-7546
Debian:14binutils2.45-3DEBIAN-CVE-2025-7546
Ubuntu:22.04:LTSbinutils2.38-4ubuntu2.10USN-7847-1
Ubuntu:24.04:LTSbinutils2.42-4ubuntu2.6USN-7847-1
Ubuntu:24.04:LTSbinutils2.42-4ubuntu2.6UBUNTU-CVE-2025-7546

Affected products (as reported)

VendorProductVersions
GNU Binutils 2.45

Weakness: CWE-787, CWE-119 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C

References