CVE-2025-3198— GNU Binutils objdump bucomm.c display_info memory leak
Quick assessment
Affected
GNU Binutils
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
GNU Binutils（GNU Binary Utilities）是美国GNU社区的开发的一组编程语言工具程序。该程序主要用于处理多种格式的目标文件，并提供有连接器、汇编器和其他用于目标文件和档案的工具。 GNU Binutils（GNU Binary Utilities） 2.43版本和2.44版本存在安全漏洞，该漏洞源于binutils/bucomm.c文件的display_info函数存在内存泄漏。
Possible ATT&CK Techniques 1 AI
T1211 · Exploitation for Stealth
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-3198
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
GNU Binutils objdump bucomm.c display_info memory leak
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability has been found in GNU Binutils 2.43/2.44 and classified as problematic. Affected by this vulnerability is the function display_info of the file binutils/bucomm.c of the component objdump. The manipulation leads to memory leak. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The patch is named ba6ad3a18cb26b79e0e3b84c39f707535bbc344d. It is recommended to apply a patch to fix this issue.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
在移除最后引用时对内存的释放不恰当(内存泄露)
Source: CVE Program / CVE List V5
Vulnerability Title
GNU Binutils（GNU Binary Utilities） 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
GNU Binutils（GNU Binary Utilities）是美国GNU社区的开发的一组编程语言工具程序。该程序主要用于处理多种格式的目标文件，并提供有连接器、汇编器和其他用于目标文件和档案的工具。 GNU Binutils（GNU Binary Utilities） 2.43版本和2.44版本存在安全漏洞，该漏洞源于binutils/bucomm.c文件的display_info函数存在内存泄漏。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2025-3198
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-3198
请登录查看更多情报信息。
Patches & Fixes for CVE-2025-3198 (1)
Vendor Pages for CVE-2025-3198 (1)
IV. Related Vulnerabilities
Same product: Binutils
-
CVE-2026-91782
GNU Binutils Dynamic Relocation Allocation elfxx-x86.c elf_x -
CVE-2026-91781
GNU Binutils ELF Section elf64-x86-64.c elf_x86_64_common_se -
CVE-2026-91780
GNU Binutils elflink.c elf_link_add_object_symbols null poin -
CVE-2026-91779
GNU Binutils Eh Frame elf-eh-frame.c _bfd_elf_eh_frame_secti -
CVE-2026-90831
GNU Binutils ELF String Table elf-strtab.c _bfd_elf_strtab_d
Same vendor: GNU
-
CVE-2026-75820
Integer Truncation Leading to Heap Corruption in GNU Aspell -
CVE-2026-75819
Out-of-bounds Read in GNU Aspell -
CVE-2026-75818
Heap Buffer Overflow in GNU Aspell's prezip utility -
CVE-2026-97876
Bypass of GRUB lockdown restriction in Secure Boot mode via -
CVE-2026-100310
GNU libextractor before 1.16 Privilege Escalation via LIBEXT
Same weakness: CWE-401
-
CVE-2026-104874
Multidict: Reference leak in CIMultiDict/MultiDict items-vie -
CVE-2026-94652
Apache Thrift: C++ `TEvhttpServer` leaks its `RequestContext -
CVE-2026-93926
Apache Thrift: C++ `THeaderTransport::untransform()` leaks t -
CVE-2026-47566
NVIDIA Linux驱动内核内存耗尽致拒绝服务漏洞 -
CVE-2026-102716
CVE-2026-102716
V. Comments for CVE-2025-3198
No comments yet