CVE-2025-69652

GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT) when processing a crafted ELF binary with malformed DWARF abbrev or debug information. Due to incomplete state cleanup in process_debug_info(), an invalid debug_info_p state may propagate into DWARF attribute parsing routines. When certain malformed attributes result in an unexpected data length of zero, byte_get_little_endian() triggers a fatal abort. No evidence of memory corruption or code execution was observed; the impact is limited to denial of service.

• CWE-460

• https://sourceware.org/bugzilla/show_bug.cgi?id=33701Exploit, Third Party Advisory
• https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=44b79abd0fa12e7947252eb4c6e5d16ed6033e01Patch

Published

Mar 6, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-69647GNU Binutils thru 2.45.1 readelf contains a denial-of-servic…6.2
• CVE-2025-69648GNU Binutils thru 2.45.1 readelf contains a denial-of-servic…6.2
• CVE-2025-69649GNU Binutils thru 2.46 readelf contains a null pointer deref…7.5
• CVE-2025-6965There exists a vulnerability in SQLite versions before 3.50.…7.7
• CVE-2025-69650GNU Binutils thru 2.46 readelf contains a double free vulner…7.5
• CVE-2025-69651GNU Binutils thru 2.46 readelf contains a vulnerability that…5.5
• CVE-2025-69653A crafted JavaScript input can trigger an internal assertion…6.5
• CVE-2025-69654A crafted JavaScript input executed with the QuickJS release…7.5
• CVE-2025-6966NULL pointer dereference in TagSection.keys() in python-apt …5.5
• CVE-2025-69662SQL injection vulnerability in geopandas before v.1.1.2 allo…8.6
• CVE-2025-6967Execution After Redirect (EAR) vulnerability in Sarman Soft …8.7
• CVE-2025-69674Buffer Overflow vulnerability in CDATA FD614GS3-R850 V3.2.7_…6.4