---
id: CVE-2025-7546
title: >-
  A vulnerability, which was classified as problematic, has been found in GNU
  Binutils 2.45
summary: >-
  A vulnerability, which was classified as problematic, has been found in GNU
  Binutils 2.45. Affected by this issue is the function
  bfd_elf_set_group_contents of the file bfd/elf.c. The manipulation leads to
  out-of-bounds write. It is poss…
severity: medium
cvss: 5.3
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L'
cwe:
  - CWE-119
  - CWE-787
vendor: gnu
product: binutils
affected:
  - binutils = 2.45
published: '2025-07-13'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T02:18:26.837'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-7546'
references:
  - url: 'https://sourceware.org/bugzilla/attachment.cgi?id=16118'
    label: cna@vuldb.com
  - url: 'https://sourceware.org/bugzilla/show_bug.cgi?id=33050'
    label: cna@vuldb.com
  - url: 'https://sourceware.org/bugzilla/show_bug.cgi?id=33050#c2'
    label: cna@vuldb.com
  - url: >-
      https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=41461010eb7c79fee7a9d5f6209accdaac66cc6b
    label: cna@vuldb.com
  - url: 'https://vuldb.com/?ctiid.316244'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/?id.316244'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/?submit.614375'
    label: cna@vuldb.com
  - url: 'https://www.gnu.org/'
    label: cna@vuldb.com
  - url: 'https://cert-portal.siemens.com/productcert/html/ssa-082556.html'
    label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
  - url: 'https://cert-portal.siemens.com/productcert/html/ssa-265688.html'
    label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
  - url: 'https://sourceware.org/bugzilla/show_bug.cgi?id=33050'
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
tags:
  - nvd
  - cve.org
  - exploit-available
epss: 0.00206
epssPercentile: 0.09944
ingestedAt: '2026-10-15T03:30:12.817Z'
exploitAvailable: true
ssvc:
  exploitation: poc
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2025-07-14T16:00:51.386955Z'
---

## Overview

A vulnerability, which was classified as problematic, has been found in GNU Binutils 2.45. Affected by this issue is the function bfd_elf_set_group_contents of the file bfd/elf.c. The manipulation leads to out-of-bounds write. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The name of the patch is 41461010eb7c79fee7a9d5f6209accdaac66cc6b. It is recommended to apply a patch to fix this issue.

## Affected

- `binutils = 2.45`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.