What’s Vulnerable › Vulnerabilities

CVE-2025-8225: GNU Binutils DWARF Section dwarf.c process_debug_info memory leak

• Severity: low (CVSS 3.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-07-27 · updated 2026-06-17
• Weakness: CWE-401

Description

A vulnerability was found in GNU Binutils 2.44 and classified as problematic. This issue affects the function process_debug_info of the file binutils/dwarf.c of the component DWARF Section Handler. The manipulation leads to memory leak. Attacking locally is a requirement. The identifier of the patch is e51fdff7d2e538c0e5accdd65649ac68e6e0ddd4. It is recommended to apply a patch to fix this issue.

Affected products

• GNU Binutils: 2.44

References

• https://gitlab.com/gnutools/binutils-gdb/-/commit/e51fdff7d2e538c0e5accdd65649ac68e6e0ddd4
• https://vuldb.com/?ctiid.317813
• https://vuldb.com/?id.317813
• https://vuldb.com/?submit.621883
• https://www.gnu.org/

Get alerted when CVE-2025-8225 or the next vulnerability affects your stack