---
id: CVE-2025-5245
title: >-
  A vulnerability classified as critical has been found in GNU Binutils up to
  2.44
summary: >-
  A vulnerability classified as critical has been found in GNU Binutils up to
  2.44. This affects the function debug_type_samep of the file /binutils/debug.c
  of the component objdump. The manipulation leads to memory corruption. Local
  acces…
severity: medium
cvss: 5.3
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L'
cwe:
  - CWE-119
vendor: gnu
product: binutils
affected:
  - binutils < 2.45
patched:
  - binutils 2.45
published: '2025-05-27'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T02:18:09.283'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-5245'
references:
  - url: 'https://sourceware.org/bugzilla/attachment.cgi?id=16004'
    label: cna@vuldb.com
  - url: 'https://sourceware.org/bugzilla/show_bug.cgi?id=32829'
    label: cna@vuldb.com
  - url: >-
      https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=6c3458a8b7ee7d39f070c7b2350851cb2110c65a
    label: cna@vuldb.com
  - url: 'https://vuldb.com/?ctiid.310347'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/?id.310347'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/?submit.584635'
    label: cna@vuldb.com
  - url: 'https://www.gnu.org/'
    label: cna@vuldb.com
  - url: 'https://cert-portal.siemens.com/productcert/html/ssa-082556.html'
    label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
  - url: 'https://cert-portal.siemens.com/productcert/html/ssa-265688.html'
    label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
tags:
  - nvd
  - cve.org
epss: 0.00286
epssPercentile: 0.19626
ingestedAt: '2026-10-15T03:30:12.814Z'
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2025-05-27T15:20:48.288532Z'
---

## Overview

A vulnerability classified as critical has been found in GNU Binutils up to 2.44. This affects the function debug_type_samep of the file /binutils/debug.c of the component objdump. The manipulation leads to memory corruption. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue.

## Affected

- `binutils < 2.45`

## Remediation

Upgrade past the affected range:

- `binutils 2.45`