CVE-2025-7546

A vulnerability, which was classified as problematic, has been found in GNU Binutils 2.45. Affected by this issue is the function bfd_elf_set_group_contents of the file bfd/elf.c. The manipulation leads to out-of-bounds write. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The name of the patch is 41461010eb7c79fee7a9d5f6209accdaac66cc6b. It is recommended to apply a patch to fix this issue.

• CWE-119
• CWE-787

• https://sourceware.org/bugzilla/attachment.cgi?id=16118Broken Link
• https://sourceware.org/bugzilla/show_bug.cgi?id=33050Broken Link
• https://sourceware.org/bugzilla/show_bug.cgi?id=33050#c2Broken Link
• https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=41461010eb7c79fee7a9d5f6209accdaac66cc6bBroken Link
• https://vuldb.com/?ctiid.316244Permissions Required, VDB Entry
• https://vuldb.com/?id.316244Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.614375Third Party Advisory, VDB Entry
• https://www.gnu.org/Product
• https://cert-portal.siemens.com/productcert/html/ssa-082556.html
• https://cert-portal.siemens.com/productcert/html/ssa-265688.html
• https://sourceware.org/bugzilla/show_bug.cgi?id=33050Broken Link

Published

Jul 13, 2025

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-7540A vulnerability, which was classified as critical, was found…9.8
• CVE-2025-7541A vulnerability has been found in code-projects Online Appoi…9.8
• CVE-2025-7542A vulnerability was found in PHPGurukul User Registration & …9.8
• CVE-2025-7543A vulnerability was found in PHPGurukul User Registration & …8.8
• CVE-2025-7544A vulnerability was found in Tenda AC1206 15.03.06.23. It ha…8.8
• CVE-2025-7545A vulnerability classified as problematic was found in GNU B…7.8
• CVE-2025-7547A vulnerability, which was classified as critical, was found…9.8
• CVE-2025-7548A vulnerability has been found in Tenda FH1201 1.2.0.14(408)…8.8
• CVE-2025-7549A vulnerability was found in Tenda FH1201 1.2.0.14(408) and …8.8
• CVE-2025-7550A vulnerability was found in Tenda FH1201 1.2.0.14(408). It …8.8
• CVE-2025-7551A vulnerability was found in Tenda FH1201 1.2.0.14(408). It …8.8
• CVE-2025-7552A vulnerability was found in Dromara Northstar up to 7.3.5. …6.3