Medium
GNU Binutils objdump debug.c debug_type_samep memory corruption
Type: advisorySources: OSV
A vulnerability classified as critical has been found in GNU Binutils up to 2.44. This affects the function debug_type_samep of the file /binutils/debug.c of the component objdump. The manipulation leads to memory corruption. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2025-5245
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 3 Nov 2026, 01:09 UTC · Revision 1
Source evidence
GNU Binutils objdump debug.c debug_type_samep memory corruption
core-osv · Original sourcePublished 27 May 2025, 14:31 UTC
A vulnerability classified as critical has been found in GNU Binutils up to 2.44. This affects the function debug_type_samep of the file /binutils/debug.c of the component objdump. The manipulation leads to memory corruption. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue.
osv:CVE-2025-5245
Complete source record
{
"id": "3b341b211a64785f8737c60c5cdcef55565dfda49e373a542811c8891d6935a5",
"url": "https://osv.dev/vulnerability/CVE-2025-5245",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "GNU Binutils objdump debug.c debug_type_samep memory corruption",
"summary": "A vulnerability classified as critical has been found in GNU Binutils up to 2.44. This affects the function debug_type_samep of the file /binutils/debug.c of the component objdump. The manipulation leads to memory corruption. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue.",
"evidence": "osv:CVE-2025-5245",
"products": [],
"severity": "medium",
"structured": {
"id": "CVE-2025-5245",
"aliases": [
"CVE-2025-5245"
],
"metrics": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://sourceware.org/git/binutils-gdb.git",
"type": "GIT",
"events": [
{
"introduced": "334d7f9db07cc1a817521296aafd9501bb020b82"
},
{
"fixed": "2bc7af1ff7732451b6a7b09462a815c3284f9613"
}
],
"database_specific": {
"extracted_events": [
{
"range": [
{
"introduced": "2.0"
},
{
"last_affected": "2.0"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "2.4"
},
{
"last_affected": "2.4"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "2.10"
},
{
"last_affected": "2.10"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "2.11"
},
{
"last_affected": "2.11"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "2.12"
},
{
"last_affected": "2.12"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "2.13"
},
{
"last_affected": "2.13"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "2.14"
},
{
"last_affected": "2.14"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "2.15"
},
{
"last_affected": "2.15"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "2.16"
},
{
"last_affected": "2.16"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "2.17"
},
{
"last_affected": "2.17"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "2.18"
},
{
"last_affected": "2.18"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "2.19"
},
{
"last_affected": "2.19"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "2.20"
},
{
"last_affected": "2.20"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "2.21"
},
{
"last_affected": "2.21"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "2.22"
},
{
"last_affected": "2.22"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "2.23"
},
{
"last_affected": "2.23"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "2.24"
},
{
"last_affected": "2.24"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "2.25"
},
{
"last_affected": "2.25"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "2.26"
},
{
"last_affected": "2.26"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "2.27"
},
{
"last_affected": "2.27"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "2.28"
},
{
"last_affected": "2.28"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "2.29"
},
{
"last_affected": "2.29"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "2.30"
},
{
"last_affected": "2.30"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "2.31"
},
{
"last_affected": "2.31"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "2.32"
},
{
"last_affected": "2.32"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "2.33"
},
{
"last_affected": "2.33"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "2.34"
},
{
"last_affected": "2.34"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "2.35"
},
{
"last_affected": "2.35"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "2.36"
},
{
"last_affected": "2.36"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "2.37"
},
{
"last_affected": "2.37"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "2.38"
},
{
"last_affected": "2.38"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "2.39"
},
{
"last_affected": "2.39"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "2.40"
},
{
"last_affected": "2.40"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "2.41"
},
{
"last_affected": "2.41"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "2.42"
},
{
"last_affected": "2.42"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "2.43"
},
{
"last_affected": "2.43"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "2.44"
},
{
"last_affected": "2.44"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"cpe": "cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "2.45"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"2.0",
"2.10",
"2.11",
"2.12",
"2.13",
"2.14",
"2.15",
"2.16",
"2.17",
"2.18",
"2.19",
"2.20",
"2.21",
"2.22",
"2.23",
"2.24",
"2.25",
"2.26",
"2.27",
"2.28",
"2.29",
"2.30",
"2.31",
"2.32",
"2.33",
"2.34",
"2.35",
"2.36",
"2.37",
"2.38",
"2.39",
"2.4",
"2.40",
"2.41",
"2.42",
"2.43",
"2.44"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-5245.json"
}
}
],
"modified": "2026-10-28T02:30:24.889788372Z",
"provider": "osv",
"references": [
"https://cert-portal.siemens.com/productcert/html/ssa-082556.html",
"https://cert-portal.siemens.com/productcert/html/ssa-265688.html",
"https://www.gnu.org/",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/5xxx/CVE-2025-5245.json",
"https://nvd.nist.gov/vuln/detail/CVE-2025-5245",
"https://vuldb.com/?id.310347",
"https://vuldb.com/?submit.584635",
"https://sourceware.org/bugzilla/show_bug.cgi?id=32829",
"https://vuldb.com/?ctiid.310347",
"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=6c3458a8b7ee7d39f070c7b2350851cb2110c65a",
"https://sourceware.org/bugzilla/attachment.cgi?id=16004"
],
"provider_metadata": {
"cwe_ids": [
"CWE-119"
],
"cna_assigner": "VulDB",
"unresolved_ranges": [
{
"extracted_events": [
{
"range": [
{
"introduced": "2.1"
},
{
"last_affected": "2.1"
},
{
"introduced": "2.2"
},
{
"last_affected": "2.2"
},
{
"introduced": "2.3"
},
{
"last_affected": "2.3"
},
{
"introduced": "2.5"
},
{
"last_affected": "2.5"
},
{
"introduced": "2.6"
},
{
"last_affected": "2.6"
},
{
"introduced": "2.7"
},
{
"last_affected": "2.7"
},
{
"introduced": "2.8"
},
{
"last_affected": "2.8"
},
{
"introduced": "2.9"
},
{
"last_affected": "2.9"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
}
]
}
],
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/5xxx/CVE-2025-5245.json"
}
},
"related_cves": [
{
"value": "CVE-2025-5245",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 491443,
"published_at": "2025-05-27T14:31:12.173+00:00"
}