{"id":"CVE-2025-5244","revision":"43875d2079024d93ab1e019be8bae564","records":[{"revision":"43875d2079024d93ab1e019be8bae564","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2025-5244","aliases":[],"title":"GNU Binutils ld elflink.c elf_gc_sweep memory corruption","description":"A vulnerability was found in GNU Binutils up to 2.44. It has been rated as critical. Affected by this issue is the function elf_gc_sweep of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. Upgrading to version 2.45 is able to address this issue. It is recommended to upgrade the affected component.","state":0,"publishedAt":"2025-05-27T13:00:14.904+00:00","modifiedAt":"2026-10-15T01:02:10.811+00:00","affected":[{"ecosystem":"Vendor product","name":"Binutils","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"GNU\",\n                    \"product\": \"Binutils\",\n                    \"versions\": [\n                        {\n                            \"version\": \"2.0\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"2.1\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"2.2\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"2.3\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"2.4\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"2.5\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"2.6\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"2.7\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"2.8\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"2.9\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"2.10\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"2.11\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"2.12\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"2.13\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"2.14\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"2.15\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"2.16\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"2.17\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"2.18\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"2.19\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"2.20\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"2.21\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"2.22\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"2.23\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"2.24\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"2.25\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"2.26\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"2.27\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"2.28\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"2.29\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"2.30\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"2.31\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"2.32\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"2.33\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"2.34\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"2.35\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"2.36\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"2.37\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"2.38\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"2.39\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"2.40\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"2.41\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"2.42\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"2.43\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"2.44\",\n                            \"status\": \"affected\"\n                        }\n                    ],\n                    \"modules\": [\n                        \"ld\"\n                    ]\n                }"}],"metrics":[{"system":"CVSS 4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","score":4.8,"severity":"MEDIUM"},{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","score":5.3,"severity":"MEDIUM"},{"system":"CVSS 3.0","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","score":5.3,"severity":"MEDIUM"},{"system":"CVSS 2.0","vector":"AV:L/AC:L/Au:S/C:P/I:P/A:P","score":4.3,"severity":null}],"references":["https://vuldb.com/?id.310346","https://vuldb.com/?ctiid.310346","https://vuldb.com/?submit.584634","https://sourceware.org/bugzilla/show_bug.cgi?id=32858","https://sourceware.org/bugzilla/attachment.cgi?id=16010","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=d1458933830456e54223d9fc61f0d9b3a19256f5","https://www.gnu.org/"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-5244","license":"CVE Program Terms of Use","key":"cve-program:CVE-2025-5244","identifiers":["CVE-2025-5244"]},"retained":false,"historicalAffected":[]}],"coverage":[]}