CVE-2025-5244— GNU Binutils ld elflink.c elf_gc_sweep memory corruption
Quick assessment
Affected
GNU Binutils
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
GNU Binutils（GNU Binary Utilities）是美国GNU社区的开发的一组编程语言工具程序。该程序主要用于处理多种格式的目标文件，并提供有连接器、汇编器和其他用于目标文件和档案的工具。 GNU Binutils 2.44及之前版本存在缓冲区错误漏洞，该漏洞源于文件bfd/elflink.c中函数elf_gc_sweep导致内存损坏。
Possible ATT&CK Techniques 1 AI
T1203 · Exploitation for Client Execution
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-5244
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
GNU Binutils ld elflink.c elf_gc_sweep memory corruption
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability was found in GNU Binutils up to 2.44. It has been rated as critical. Affected by this issue is the function elf_gc_sweep of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. Upgrading to version 2.45 is able to address this issue. It is recommended to upgrade the affected component.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
内存缓冲区边界内操作的限制不恰当
Source: CVE Program / CVE List V5
Vulnerability Title
GNU Binutils 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
GNU Binutils（GNU Binary Utilities）是美国GNU社区的开发的一组编程语言工具程序。该程序主要用于处理多种格式的目标文件，并提供有连接器、汇编器和其他用于目标文件和档案的工具。 GNU Binutils 2.44及之前版本存在缓冲区错误漏洞，该漏洞源于文件bfd/elflink.c中函数elf_gc_sweep导致内存损坏。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2025-5244
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-5244
请登录查看更多情报信息。
Vendor Pages for CVE-2025-5244 (1)
IV. Related Vulnerabilities
Same product: Binutils
-
CVE-2026-91782
GNU Binutils Dynamic Relocation Allocation elfxx-x86.c elf_x -
CVE-2026-91781
GNU Binutils ELF Section elf64-x86-64.c elf_x86_64_common_se -
CVE-2026-91780
GNU Binutils elflink.c elf_link_add_object_symbols null poin -
CVE-2026-91779
GNU Binutils Eh Frame elf-eh-frame.c _bfd_elf_eh_frame_secti -
CVE-2026-90831
GNU Binutils ELF String Table elf-strtab.c _bfd_elf_strtab_d
Same vendor: GNU
-
CVE-2026-75820
Integer Truncation Leading to Heap Corruption in GNU Aspell -
CVE-2026-75819
Out-of-bounds Read in GNU Aspell -
CVE-2026-75818
Heap Buffer Overflow in GNU Aspell's prezip utility -
CVE-2026-97876
Bypass of GRUB lockdown restriction in Secure Boot mode via -
CVE-2026-100310
GNU libextractor before 1.16 Privilege Escalation via LIBEXT
Same weakness: CWE-119
-
CVE-2026-82335
IBM Guardium Data Protection Buffer Overflow -
CVE-2026-82344
IBM Guardium Data Protection Buffer Overflow -
CVE-2026-84290
Security vulnerability affects the Windows S-TAP component a -
CVE-2026-106067
Gimp: gimp: heap buffer overflow in hot color filter on over -
CVE-2026-106066
Gimp: gimp: heap buffer overflow in raw data export on overs
V. Comments for CVE-2025-5244
No comments yet