CVE-2025-0840— GNU Binutils objdump.c disassemble_bytes stack-based overflow
Quick assessment
Affected
GNU Binutils
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
GNU Binutils（GNU Binary Utilities）是美国GNU社区的开发的一组编程语言工具程序。该程序主要用于处理多种格式的目标文件，并提供有连接器、汇编器和其他用于目标文件和档案的工具。 GNU Binutils 2.43版本及之前版本存在安全漏洞，该漏洞源于对参数 buf 的错误操作会导致基于堆栈的缓冲区溢出。
Possible ATT&CK Techniques 2 AI
T1068 · Exploitation for Privilege Escalation T1203 · Exploitation for Client Execution
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-0840
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
GNU Binutils objdump.c disassemble_bytes stack-based overflow
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. This affects the function disassemble_bytes of the file binutils/objdump.c. The manipulation of the argument buf leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 2.44 is able to address this issue. The identifier of the patch is baac6c221e9d69335bf41366a1c7d87d8ab2f893. It is recommended to upgrade the affected component.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
栈缓冲区溢出
Source: CVE Program / CVE List V5
Vulnerability Title
GNU Binutils 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
GNU Binutils（GNU Binary Utilities）是美国GNU社区的开发的一组编程语言工具程序。该程序主要用于处理多种格式的目标文件，并提供有连接器、汇编器和其他用于目标文件和档案的工具。 GNU Binutils 2.43版本及之前版本存在安全漏洞，该漏洞源于对参数 buf 的错误操作会导致基于堆栈的缓冲区溢出。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2025-0840
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-0840
请登录查看更多情报信息。
Patches & Fixes for CVE-2025-0840 (1)
Vendor Advisories for CVE-2025-0840 (4)
-
CVE-2025-0840 GNU Binutils objdump.c disassemble_bytes stack-based overflow signature permissions-required
-
Submit #485255: GNU binutils/objdump 2.43 Buffer Overflow third-party-advisory
-
CVE-2025-0840 GNU Binutils objdump.c disassemble_bytes stack-based overflow vdb-entry technical-description
Vendor Pages for CVE-2025-0840 (1)
Other References for CVE-2025-0840 (1)
IV. Related Vulnerabilities
Same product: Binutils
-
CVE-2026-91782
GNU Binutils Dynamic Relocation Allocation elfxx-x86.c elf_x -
CVE-2026-91781
GNU Binutils ELF Section elf64-x86-64.c elf_x86_64_common_se -
CVE-2026-91780
GNU Binutils elflink.c elf_link_add_object_symbols null poin -
CVE-2026-91779
GNU Binutils Eh Frame elf-eh-frame.c _bfd_elf_eh_frame_secti -
CVE-2026-90831
GNU Binutils ELF String Table elf-strtab.c _bfd_elf_strtab_d
Same vendor: GNU
-
CVE-2026-75820
Integer Truncation Leading to Heap Corruption in GNU Aspell -
CVE-2026-75819
Out-of-bounds Read in GNU Aspell -
CVE-2026-75818
Heap Buffer Overflow in GNU Aspell's prezip utility -
CVE-2026-97876
Bypass of GRUB lockdown restriction in Secure Boot mode via -
CVE-2026-100310
GNU libextractor before 1.16 Privilege Escalation via LIBEXT
V. Comments for CVE-2025-0840
No comments yet