ZeroDay Findings
Sign inSign up

Findings

CVE-2025-3198

A vulnerability has been found in GNU Binutils 2.43/2.44 and classified as problematic.

Published Apr 4, 2025 · updated Oct 15, 2026 · gnu binutils

A vulnerability has been found in GNU Binutils 2.43/2.44 and classified as problematic. Affected by this vulnerability is the function display_info of the file binutils/bucomm.c of the component objdump. The manipulation leads to memory leak. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The patch is named ba6ad3a18cb26b79e0e3b84c39f707535bbc344d. It is recommended to apply a patch to fix this issue.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 4, 2025 · NIST NVD

    Detected

    A vulnerability has been found in GNU Binutils 2.43/2.44 and classified as problematic. Affected by this vulnerability is the function display_info of the file binutils/bucomm.c of the component objdump. The manipulation leads to memory leak. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The patch is named ba6ad3a18cb26b79e0e3b84c39f707535bbc

  2. Oct 15, 2026 · NIST NVD

    Updated

    A vulnerability has been found in GNU Binutils 2.43/2.44 and classified as problematic. Affected by this vulnerability is the function display_info of the file binutils/bucomm.c of the component objdump. The manipulation leads to memory leak. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The patch is named ba6ad3a18cb26b79e0e3b84c39f707535bbc

Affected

  • cpe gnu/binutils2.43
  • cpe gnu/binutils2.44

Sources

  • CVE.orgCVE-2025-3198

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2025-3198

    30-day exploitation probability 0.3%

    first.org
  • NIST NVDCVE-2025-3198

    A vulnerability has been found in GNU Binutils 2.43/2.44 and classified as problematic. Affected by this vulnerability is the function display_info of the file binutils/bucomm.c of the component objdump. The manipulation leads to memory leak. An attack has to be approached locall

    nvd.nist.gov

References