---
id: CVE-2025-5244
title: A vulnerability was found in GNU Binutils up to 2.44
summary: >-
  A vulnerability was found in GNU Binutils up to 2.44. It has been rated as
  critical. Affected by this issue is the function elf_gc_sweep of the file
  bfd/elflink.c of the component ld. The manipulation leads to memory
  corruption. An attac…
severity: medium
cvss: 5.3
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L'
cwe:
  - CWE-119
vendor: gnu
product: binutils
affected:
  - binutils < 2.45
patched:
  - binutils 2.45
published: '2025-05-27'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T02:18:09.063'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-5244'
references:
  - url: 'https://sourceware.org/bugzilla/attachment.cgi?id=16010'
    label: cna@vuldb.com
  - url: 'https://sourceware.org/bugzilla/show_bug.cgi?id=32858'
    label: cna@vuldb.com
  - url: >-
      https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=d1458933830456e54223d9fc61f0d9b3a19256f5
    label: cna@vuldb.com
  - url: 'https://vuldb.com/?ctiid.310346'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/?id.310346'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/?submit.584634'
    label: cna@vuldb.com
  - url: 'https://www.gnu.org/'
    label: cna@vuldb.com
  - url: 'https://cert-portal.siemens.com/productcert/html/ssa-082556.html'
    label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
  - url: 'https://cert-portal.siemens.com/productcert/html/ssa-265688.html'
    label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
tags:
  - nvd
  - cve.org
  - exploit-available
epss: 0.00284
epssPercentile: 0.19456
ingestedAt: '2026-10-15T03:30:12.814Z'
exploitAvailable: true
ssvc:
  exploitation: poc
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2025-05-27T13:31:20.442015Z'
---

## Overview

A vulnerability was found in GNU Binutils up to 2.44. It has been rated as critical. Affected by this issue is the function elf_gc_sweep of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. Upgrading to version 2.45 is able to address this issue. It is recommended to upgrade the affected component.

## Affected

- `binutils < 2.45`

## Remediation

Upgrade past the affected range:

- `binutils 2.45`