PT-2025-4066

CVE-2025-0840

Published

2025-01-29

Updated

2026-08-25

Description by

CVSS 3.1

7.7

High

MetricsAV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions GNU Binutils versions up to 2.43

Description A problematic issue was found in GNU Binutils, affecting the disassemble bytes function of the file binutils/objdump.c. The manipulation of the buf argument leads to a stack-based buffer overflow. It is possible to initiate the attack remotely, with a rather high complexity and difficult exploitability.

Recommendations GNU Binutils versions up to 2.43: Upgrade to version 2.44 to address this issue.

Exploitability

Exploit

Fix

Impacts

Researchers

Wenjusun

Vendors