CVE-2025-7545Medium· 5.3▾ TwilightPoC availableA vulnerability classified as problematic was found in GNU Binutils 2.45. Affected by this vulnerability is the function copy_section of the file binutils/objcopy.c. The manipulation leads to heap-based buffer overflow. Attacking locally…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 29.2 · likelihood 0.1 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 1 source. Availability, not in-the-wild use.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.3%
1 GitHub repo (last check)
A vulnerability classified as problematic was found in GNU Binutils 2.45. Affected by this vulnerability is the function copy_section of the file binutils/objcopy.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The patch is named 08c3cbe5926e4d355b5cb70bbec2b1eeb40c2944. It is recommended to apply a patch to fix this issue.
binutils = 2.45Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-7546Medium· 5.3A vulnerability, which was classified as problematic, has been found in GNU Binutils 2.45
CVE-2025-5244Medium· 5.3A vulnerability was found in GNU Binutils up to 2.44
CVE-2025-11083Medium· 5.3A vulnerability has been found in GNU Binutils 2.45
CVE-2025-11495Low· 3.3A vulnerability was determined in GNU Binutils 2.45
CVE-2025-5245Medium· 5.3A vulnerability classified as critical has been found in GNU Binutils up to 2.44
CVE-2025-11082Medium· 5.3A flaw has been found in GNU Binutils 2.45