---
id: CVE-2025-3198
title: >-
  A vulnerability has been found in GNU Binutils 2.43/2.44 and classified as
  problematic
summary: >-
  A vulnerability has been found in GNU Binutils 2.43/2.44 and classified as
  problematic. Affected by this vulnerability is the function display_info of
  the file binutils/bucomm.c of the component objdump. The manipulation leads to
  memory …
severity: low
cvss: 3.3
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L'
cwe:
  - CWE-401
  - CWE-404
vendor: gnu
product: binutils
affected:
  - binutils = 2.43
  - binutils = 2.44
published: '2025-04-04'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T02:18:04.430'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-3198'
references:
  - url: 'https://sourceware.org/bugzilla/show_bug.cgi?id=32716'
    label: cna@vuldb.com
  - url: 'https://sourceware.org/bugzilla/show_bug.cgi?id=32716#c0'
    label: cna@vuldb.com
  - url: >-
      https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ba6ad3a18cb26b79e0e3b84c39f707535bbc344d
    label: cna@vuldb.com
  - url: 'https://vuldb.com/?ctiid.303151'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/?id.303151'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/?submit.545773'
    label: cna@vuldb.com
  - url: 'https://www.gnu.org/'
    label: cna@vuldb.com
  - url: 'https://cert-portal.siemens.com/productcert/html/ssa-082556.html'
    label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
  - url: 'https://cert-portal.siemens.com/productcert/html/ssa-265688.html'
    label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
  - url: 'https://sourceware.org/bugzilla/show_bug.cgi?id=32716'
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
tags:
  - nvd
  - cve.org
  - exploit-available
epss: 0.00282
epssPercentile: 0.19228
ingestedAt: '2026-10-15T03:30:12.808Z'
exploitAvailable: true
ssvc:
  exploitation: poc
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2025-04-04T14:36:25.636186Z'
---

## Overview

A vulnerability has been found in GNU Binutils 2.43/2.44 and classified as problematic. Affected by this vulnerability is the function display_info of the file binutils/bucomm.c of the component objdump. The manipulation leads to memory leak. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The patch is named ba6ad3a18cb26b79e0e3b84c39f707535bbc344d. It is recommended to apply a patch to fix this issue.

## Affected

- `binutils = 2.43`
- `binutils = 2.44`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.