QwikSec

Security Database

CVE

CWE

Training

CVE-2025-7546

Published: Jul 13, 2025

Modified: May 12, 2026

PUBLISHED

CVSS v3.1

5.3

MEDIUM

Description

A vulnerability, which was classified as problematic, has been found in GNU Binutils 2.45. Affected by this issue is the function bfd_elf_set_group_contents of the file bfd/elf.c. The manipulation leads to out-of-bounds write. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The name of the patch is 41461010eb7c79fee7a9d5f6209accdaac66cc6b. It is recommended to apply a patch to fix this issue.

Vendor	Product	Versions
GNU	Binutils	affected `2.45`

Weaknesses (CWE)

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

Low

References

VDB-316244 | GNU Binutils elf.c bfd_elf_set_group_contents out-of-bounds write

vdb-entry

technical-description

VDB-316244 | CTI Indicators (IOB, IOC, IOA)

signature

permissions-required

Submit #614375 | GNU binutils--gdb 2.45 Out-of-bounds Write

third-party-advisory

https://sourceware.org/bugzilla/show_bug.cgi?id=33050

issue-tracking

https://sourceware.org/bugzilla/show_bug.cgi?id=33050#c2

issue-tracking

https://sourceware.org/bugzilla/attachment.cgi?id=16118

exploit

https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=41461010eb7c79fee7a9d5f6209accdaac66cc6b

patch

https://www.gnu.org/

product

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.