CVE-2025-3198

A vulnerability has been found in GNU Binutils 2.43/2.44 and classified as problematic. Affected by this vulnerability is the function display_info of the file binutils/bucomm.c of the component objdump. The manipulation leads to memory leak. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The patch is named ba6ad3a18cb26b79e0e3b84c39f707535bbc344d. It is recommended to apply a patch to fix this issue.

• CWE-401
• CWE-404
• CWE-401

• https://sourceware.org/bugzilla/show_bug.cgi?id=32716Broken Link
• https://sourceware.org/bugzilla/show_bug.cgi?id=32716#c0Issue Tracking
• https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ba6ad3a18cb26b79e0e3b84c39f707535bbc344dBroken Link
• https://vuldb.com/?ctiid.303151Permissions Required, VDB Entry
• https://vuldb.com/?id.303151Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.545773Exploit, Third Party Advisory, VDB Entry
• https://www.gnu.org/Product
• https://cert-portal.siemens.com/productcert/html/ssa-082556.html
• https://cert-portal.siemens.com/productcert/html/ssa-265688.html
• https://sourceware.org/bugzilla/show_bug.cgi?id=32716Broken Link

Published

Apr 4, 2025

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-31974HCL BigFix Service Management (SM) is susceptible to a Root …7.2
• CVE-2025-31975HCL BigFix Service Management (SM) is affected by an Informa…5.3
• CVE-2025-31976HCL BigFix Service Management (SM) is vulnerable to insuffic…7.5
• CVE-2025-31977HCL BigFix SM is affected by cryptographic weakness due to w…6.5
• CVE-2025-31978HCL BigFix Service Management (SM) does not adequately sanit…4.3
• CVE-2025-31979A File Upload Validation Bypass vulnerability has been ident…5.4
• CVE-2025-31981HCL BigFix Service Management (SM) Discovery is vulnerable t…5.3
• CVE-2025-31982HCL BigFix Service Management (SM) had directories that were…6.5
• CVE-2025-31983HCL BigFix Service Management (SM) is affected by a security…4.6
• CVE-2025-31984HCL BigFix Service Management (SM) is affected by a security…5.4
• CVE-2025-31985HCL BigFix Service Management (SM) is affected by a security…6.5
• CVE-2025-31987HCL Connections Docs may mishandle validation of certain upl…7.5