CVE-2025-69644: An issue was discovered in Binutils before 2.46. The objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed debug information. A logic flaw in the handling of DWARF location list headers can cause objdump to enter an unbounded loop and produce endless output until manually interrupted. This issue affects versions prior to the upstream fix and allows a local attacker to cause excessive resource consumption by supplying a malicious input

CSIRTS triage

What: An unbounded loop in objdump's DWARF debug information parsing can cause denial of service when processing malformed binaries.
Who is affected: Systems using objdump (part of Binutils) to analyze untrusted or potentially malformed binary files.
Urgency: Medium; exploitation requires providing a crafted binary to the user, but can halt analysis tools.
Action: Update Binutils to version 2.46 or later.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch Binutils

Get an email when a new Binutils advisory drops — max one per day, one-click unsubscribe.

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Low exploitation riskCVE-2025-696440.13% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 3% of all EPSS-scored CVEs.

CVE	CSIRTS overview	External
CVE-2025-69644	coverage & exploitation status	NVD · CVE.org