Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-79574.json
JSON Data
https://api.test.osv.dev/v1/vulns/AZL-79574
Upstream
Published
2026-03-06T18:16:16Z
Modified
2026-04-01T05:23:29Z
Summary
CVE-2025-69651 affecting package binutils 2.41-10
Details

GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an invalid pointer free when processing a crafted ELF binary with malformed relocation or symbol data. If dump_relocations returns early due to parsing errors, the internal all_relocations array may remain partially uninitialized. Later, process_got_section_contents() may attempt to free an invalid r_symbol pointer, triggering memory corruption checks in glibc and causing the program to terminate with SIGABRT. No evidence of further memory corruption or code execution was observed; the impact is limited to denial of service.

References

Affected packages

Azure Linux:3 / binutils

Package

Name
binutils
Purl
pkg:rpm/azure-linux/binutils

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Last Affected
2.41-10

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-79574.json"