CVE Database›CVE-2025-3198

CVE-2025-3198

binutils: GNU Binutils objdump bucomm.c display_info memory leak

Loading…

Severity

Low

Red Hat Product Security

3.3

CVSS 3.1

Review impact separately from score.

Published · April 4, 2025

Updated · September 1, 2026

Description

A flaw was found in GNU Binutils. Affected by this vulnerability is the function display_info of the file binutils/bucomm.c of the component objdump. The manipulation leads to memory leak. An attack has to be approached locally.

Statement

This vulnerability is rated Low for Red Hat products. The flaw is a memory leak in the objdump utility of GNU Binutils, which requires local access to exploit. Impact is limited as successful exploitation would primarily lead to denial of service due to memory exhaustion on the local system.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 3.3
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CWE-772 · Missing Release of Resource after Effective Lifetime