PT-2026-23739

CVE-2025-69649

·

Published

2025-12-07

·

Updated

2026-09-30

Description by

CVSS 2.0
7.8
High
MetricsAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions GNU Binutils versions through 2.46
Description The software contains a flaw where a null pointer dereference can occur when processing a specially crafted ELF binary with incorrectly formatted header fields. This happens during relocation processing when an invalid or null section pointer is passed to the display relocations() function, leading to a segmentation fault and program termination. No evidence suggests memory corruption beyond the null pointer dereference or the possibility of code execution.
Recommendations Update to a newer version of GNU Binutils than 2.46. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
AZL-79571
AZL-79595
ECHO-5E4D-8C97-615A
OPENSUSE-SU-2026:11932-1
RHSA-2026:7098
Found an issue in the description? Have something to add? Feel free to write us 👾