CVE-2025-8225

A vulnerability was found in GNU Binutils 2.44 and classified as problematic. This issue affects the function processdebuginfo of the file binutils/dwarf.c of the component DWARF Section Handler. The manipulation leads to memory leak. Attacking locally is a requirement. The identifier of the patch is e51fdff7d2e538c0e5accdd65649ac68e6e0ddd4. It is recommended to apply a patch to fix this issue.

References

Affected packages

Alpine:v3.22 / binutils

Package

Name: binutils
Purl: pkg:apk/alpine/binutils?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.44-r3

Affected versions

2.*

2.20.51.0.4-r1

2.20.51.0.12-r0

2.21-r0

2.21.1-r0

2.22-r0

2.22-r1

2.23-r0

2.23.1-r0

2.23.2-r0

2.23.2-r1

2.23.2-r2

2.23.2-r3

2.23.2-r4

2.23.2-r5

2.24-r0

2.24-r1

2.24-r2

2.24-r3

2.24-r4

2.24-r5

2.25-r0

2.25-r1

2.25-r2

2.25-r3

2.25.1-r0

2.26-r0

2.26.1-r0

2.27-r0

2.27-r1

2.28-r0

2.28-r1

2.28-r2

2.28-r3

2.30-r0

2.30-r1

2.30-r2

2.30-r3

2.30-r4

2.30-r5

2.31.1-r0

2.31.1-r1

2.31.1-r2

2.32-r0

2.33.1-r0

2.33.1-r1

2.34-r0

2.34-r1

2.35.1-r0

2.35.1-r1

2.35.2-r0

2.35.2-r1

2.35.2-r2

2.37-r0

2.37-r1

2.37-r2

2.37-r3

2.37-r4

2.38-r0

2.38-r1

2.38-r2

2.38-r3

2.38-r4

2.39-r0

2.39-r1

2.39-r2

2.39-r3

2.40-r0

2.40-r1

2.40-r2

2.40-r3

2.40-r4

2.40-r5

2.40-r6

2.40-r7

2.40-r8

2.40-r9

2.40-r10

2.40-r11

2.40-r12

2.41-r0

2.42-r0

2.42-r1

2.43-r0

2.43.1-r0

2.43.1-r1

2.44-r0

2.44-r2

Git / gitlab.com/gnutools/binutils-gdb

Affected ranges

Type: GIT
Repo: https://gitlab.com/gnutools/binutils-gdb
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

e51fdff7d2e538c0e5accdd65649ac68e6e0ddd4

Type: GIT
Repo: https://sourceware.org/git/binutils-gdb.git
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Last affected

815d9a14cbbb3b81843f7566222c87fb22e7255d

Affected versions

Other

binu_ss_19990502

binutils-2_41-release

binutils-2_44

gdb-10-branchpoint

gdb-11-branchpoint

gdb-12-branchpoint

gdb-13-branchpoint

gdb-14-branchpoint

gdb-15-branchpoint

gdb-16-branchpoint

gdb-4_18-branchpoint

gdb-9-branchpoint

gdb_5_2-branchpoint

gdb_5_3-branchpoint

gdb_6_0-branchpoint

gdb_6_1-branchpoint

gdb_6_2-branchpoint

gdb_6_3-branchpoint

gdb_6_4-branchpoint

gdb_6_5-branchpoint

gdb_6_6-branchpoint

gdb_6_7-branchpoint

gdb_6_8-branchpoint

gdb_7_0-branchpoint

gdb_7_1-branchpoint

gdb_7_2-branchpoint

gdb_7_3-branchpoint

gdb_7_4-branchpoint

gdb_7_5-branchpoint

gdb_7_6-branchpoint

readline_4_0

users/ARM/embedded-binutils-master-2016q4

users/ARM/embedded-binutils-master-2017q4

users/ARM/embedded-binutils-master-2018q4

users/ARM/embedded-gdb-master-2017q4

users/ARM/embedded-gdb-master-2018q4

gdb-7.*

gdb-7.10-branchpoint

gdb-7.11-branchpoint

gdb-7.12-branchpoint

gdb-7.7-branchpoint

gdb-7.8-branchpoint

gdb-7.9-branchpoint

gdb-8.*

gdb-8.0-branchpoint

gdb-8.1-branchpoint

gdb-8.2-branchpoint

gdb-8.3-branchpoint

Database specific

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "165999291295802883329923850898779896356",
                    "105014335341139990871164577991028037228",
                    "180591887664868412102303276991854685890",
                    "162692490956015083006293578593024538322",
                    "75468314745270349724627550155628282484",
                    "89197783048136794146220913713931563919",
                    "332282208896222479544661138100857955575",
                    "77575082719107474791585321126464455399"
                ]
            },
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://gitlab.com/gnutools/binutils-gdb@e51fdff7d2e538c0e5accdd65649ac68e6e0ddd4",
            "id": "CVE-2025-8225-989df07f",
            "deprecated": false,
            "target": {
                "file": "binutils/dwarf.c"
            }
        },
        {
            "digest": {
                "function_hash": "310981831396211155408794020530760590478",
                "length": 11973.0
            },
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://gitlab.com/gnutools/binutils-gdb@e51fdff7d2e538c0e5accdd65649ac68e6e0ddd4",
            "id": "CVE-2025-8225-b988f82f",
            "deprecated": false,
            "target": {
                "file": "binutils/dwarf.c",
                "function": "process_debug_info"
            }
        }
    ]
}