CVE-2025-3198
binutils: GNU Binutils objdump bucomm.c display_info memory leak
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · April 4, 2025
Updated · September 1, 2026
Description
A flaw was found in GNU Binutils. Affected by this vulnerability is the function display_info of the file binutils/bucomm.c of the component objdump. The manipulation leads to memory leak. An attack has to be approached locally.
Statement
This vulnerability is rated Low for Red Hat products. The flaw is a memory leak in the objdump utility of GNU Binutils, which requires local access to exploit. Impact is limited as successful exploitation would primarily lead to denial of service due to memory exhaustion on the local system.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 3.3CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CWE-772 · Missing Release of Resource after Effective Lifetime