CVE-2025-69652

The record

GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT) when processing a crafted ELF binary with malformed DWARF abbrev or debug information. Due to incomplete state cleanup in process_debug_info(), an invalid debug_info_p state may propagate into DWARF attribute parsing routines. When certain malformed attributes result in an unexpected data length of zero, byte_get_little_endian() triggers a fatal abort. No evidence of memory corruption or code execution was observed; the impact is limited to denial of service.

Affected packages

Related vulnerabilities

• CVE-2026-112326 GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before… CWE-460
• CVE-2026-48524 PyJWT is a JSON Web Token implementation in Python. CWE-460
• CVE-2026-40583 UltraDAG is a minimal DAG-BFT blockchain in Rust. CWE-460
• CVE-2026-33481 Syft is a a CLI tool and Go library for generating a Software Bill of Materials (SBOM)… CWE-460
• CVE-2026-20118 A vulnerability in the handling of an Egress Packet Network Interface (EPNI) Aligner… CWE-460
• CVE-2025-31650 Apache Tomcat Denial of Service via invalid HTTP priority header CWE-460