CVE-2025-3198

Katalog CVE

CVSS 5.5 · Medium EPSS 0,28%

Kerentanan Missing Release of Memory after Effective Lifetime pada gnu binutils. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

A vulnerability has been found in GNU Binutils 2.43/2.44 and classified as problematic. Affected by this vulnerability is the function display_info of the file binutils/bucomm.c of the component objdump. The manipulation leads to memory leak. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The patch is named ba6ad3a18cb26b79e0e3b84c39f707535bbc344d. It is recommended to apply a patch to fix this issue.

Rincian

Terbit di NVD

4 April 2025

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-401: Missing Release of Memory after Effective Lifetime
CWE-404: Improper Resource Shutdown or Release

EPSS (30 hari)

0,28% peluang dieksploitasi; lebih tinggi dari 19,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://vuldb.com/?id.303151 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.545773 exploit · advisory pihak ketiga · vdb entry
• https://sourceware.org/bugzilla/show_bug.cgi?id=32716 broken link
• https://sourceware.org/bugzilla/show_bug.cgi?id=32716#c0 issue tracking
• https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ba6ad3a18cb26b79e0e3b84c39f707535bbc344d broken link
• https://vuldb.com/?ctiid.303151 permissions required · vdb entry
• https://www.gnu.org/ product
• https://cert-portal.siemens.com/productcert/html/ssa-082556.html
• https://cert-portal.siemens.com/productcert/html/ssa-265688.html