CVE-2025-69648

Public on 2026-03-09
Modified on 2026-03-10
Description
GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF .debug_rnglists data. A logic flaw in the DWARF parsing path causes readelf to repeatedly print the same warning message without making forward progress, resulting in a non-terminating output loop that requires manual interruption. No evidence of memory corruption or code execution was observed.
Severity
Low severity
Low
See what this means
CVSS v3 Base Score
3.3
See breakdown

Affected Packages

Platform Package Release Date Advisory Status
Amazon Linux 2 - Core binutils Pending Fix
Amazon Linux 2023 binutils Pending Fix
Amazon Linux 2 - Core gcc10-binutils Pending Fix
Amazon Linux 2 - Core gdb Pending Fix
Amazon Linux 2023 gdb Pending Fix
Amazon Linux 2 - Core golang Pending Fix

CVSS Scores

Score Type Score Vector
Amazon Linux CVSSv3 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L