CVE-2025-5244

Source
https://cve.org/CVERecord?id=CVE-2025-5244
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-5244.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-5244
Downstream
Related
Published
2025-05-27T13:00:14Z
Modified
2026-08-27T11:45:14Z
Severity
  • 4.8 (Medium) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N CVSS Calculator
Summary
GNU Binutils ld elflink.c elf_gc_sweep memory corruption
Details

A vulnerability was found in GNU Binutils up to 2.44. It has been rated as critical. Affected by this issue is the function elf_gc_sweep of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. Upgrading to version 2.45 is able to address this issue. It is recommended to upgrade the affected component.

Database specific
{
    "cna_assigner":  "VulDB",
    "cwe_ids":  [
        "CWE-119"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/5xxx/CVE-2025-5244.json",
    "unresolved_ranges":  [
        {
            "extracted_events":  [
                {
                    "introduced":  "2.1"
                },
                {
                    "last_affected":  "2.1"
                },
                {
                    "introduced":  "2.2"
                },
                {
                    "last_affected":  "2.2"
                },
                {
                    "introduced":  "2.3"
                },
                {
                    "last_affected":  "2.3"
                },
                {
                    "introduced":  "2.5"
                },
                {
                    "last_affected":  "2.5"
                },
                {
                    "introduced":  "2.6"
                },
                {
                    "last_affected":  "2.6"
                },
                {
                    "introduced":  "2.7"
                },
                {
                    "last_affected":  "2.7"
                },
                {
                    "introduced":  "2.8"
                },
                {
                    "last_affected":  "2.8"
                },
                {
                    "introduced":  "2.9"
                },
                {
                    "last_affected":  "2.9"
                }
            ],
            "source":  "AFFECTED_FIELD"
        }
    ]
}
References

Affected packages

Git / sourceware.org/git/binutils-gdb.git

Affected ranges

Type
GIT
Repo
https://sourceware.org/git/binutils-gdb.git
Events
Database specific
Show details
{
    "cpe":  "cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*",
    "extracted_events":  [
        {
            "introduced":  "2.0"
        },
        {
            "last_affected":  "2.0"
        },
        {
            "introduced":  "2.4"
        },
        {
            "last_affected":  "2.4"
        },
        {
            "introduced":  "2.10"
        },
        {
            "last_affected":  "2.10"
        },
        {
            "introduced":  "2.11"
        },
        {
            "last_affected":  "2.11"
        },
        {
            "introduced":  "2.12"
        },
        {
            "last_affected":  "2.12"
        },
        {
            "introduced":  "2.13"
        },
        {
            "last_affected":  "2.13"
        },
        {
            "introduced":  "2.14"
        },
        {
            "last_affected":  "2.14"
        },
        {
            "introduced":  "2.15"
        },
        {
            "last_affected":  "2.15"
        },
        {
            "introduced":  "2.16"
        },
        {
            "last_affected":  "2.16"
        },
        {
            "introduced":  "2.17"
        },
        {
            "last_affected":  "2.17"
        },
        {
            "introduced":  "2.18"
        },
        {
            "last_affected":  "2.18"
        },
        {
            "introduced":  "2.19"
        },
        {
            "last_affected":  "2.19"
        },
        {
            "introduced":  "2.20"
        },
        {
            "last_affected":  "2.20"
        },
        {
            "introduced":  "2.21"
        },
        {
            "last_affected":  "2.21"
        },
        {
            "introduced":  "2.22"
        },
        {
            "last_affected":  "2.22"
        },
        {
            "introduced":  "2.23"
        },
        {
            "last_affected":  "2.23"
        },
        {
            "introduced":  "2.24"
        },
        {
            "last_affected":  "2.24"
        },
        {
            "introduced":  "2.25"
        },
        {
            "last_affected":  "2.25"
        },
        {
            "introduced":  "2.26"
        },
        {
            "last_affected":  "2.26"
        },
        {
            "introduced":  "2.27"
        },
        {
            "last_affected":  "2.27"
        },
        {
            "introduced":  "2.28"
        },
        {
            "last_affected":  "2.28"
        },
        {
            "introduced":  "2.29"
        },
        {
            "last_affected":  "2.29"
        },
        {
            "introduced":  "2.30"
        },
        {
            "last_affected":  "2.30"
        },
        {
            "introduced":  "2.31"
        },
        {
            "last_affected":  "2.31"
        },
        {
            "introduced":  "2.32"
        },
        {
            "last_affected":  "2.32"
        },
        {
            "introduced":  "2.33"
        },
        {
            "last_affected":  "2.33"
        },
        {
            "introduced":  "2.34"
        },
        {
            "last_affected":  "2.34"
        },
        {
            "introduced":  "2.35"
        },
        {
            "last_affected":  "2.35"
        },
        {
            "introduced":  "2.36"
        },
        {
            "last_affected":  "2.36"
        },
        {
            "introduced":  "2.37"
        },
        {
            "last_affected":  "2.37"
        },
        {
            "introduced":  "2.38"
        },
        {
            "last_affected":  "2.38"
        },
        {
            "introduced":  "2.39"
        },
        {
            "last_affected":  "2.39"
        },
        {
            "introduced":  "2.40"
        },
        {
            "last_affected":  "2.40"
        },
        {
            "introduced":  "2.41"
        },
        {
            "last_affected":  "2.41"
        },
        {
            "introduced":  "2.42"
        },
        {
            "last_affected":  "2.42"
        },
        {
            "introduced":  "2.43"
        },
        {
            "last_affected":  "2.43"
        },
        {
            "introduced":  "2.44"
        },
        {
            "last_affected":  "2.44"
        },
        {
            "introduced":  "0"
        },
        {
            "fixed":  "2.45"
        }
    ],
    "source":  [
        "AFFECTED_FIELD",
        "CPE_RANGE"
    ]
}

Affected versions

2.*
2.0
2.10
2.11
2.12
2.13
2.14
2.15
2.16
2.17
2.18
2.19
2.20
2.21
2.22
2.23
2.24
2.25
2.26
2.27
2.28
2.29
2.30
2.31
2.32
2.33
2.34
2.35
2.36
2.37
2.38
2.39
2.4
2.40
2.41
2.42
2.43
2.44

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-5244.json"