CVE-2025-69644

Medium

Description

An issue was discovered in Binutils before 2.46. The objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed debug information. A logic flaw in the handling of DWARF location list headers can cause objdump to enter an unbounded loop and produce endless output until manually interrupted. This issue affects versions prior to the upstream fix and allows a local attacker to cause excessive resource consumption by supplying a malicious input file.

SeverityMedium
CVSS5.0
Exploit probability—
ProductGnu Binutils
PublishedMar 6, 2026
First seenMar 6, 2026

How to fix

Update
  • gnu binutils2.46 or later

Affected products

ProductAffected versionsFixed in
gnu binutilsv < 2.462.46

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.