CVE-2025-69646: Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug_rnglists data. A logic error in the handling of the debug_rnglists header can cause objdump to repeatedly print the same warning message and fail to terminate, resulting in an unbounded logging loop until the process is interrupted. The issue was observed in binutils 2.44. A local attacker can exploit this vulnerability by supplying a malicious input file, leadi

CSIRTS triage

What: Denial-of-service vulnerability in objdump when processing malformed DWARF debug_rnglists data causing infinite warning loops.
Who is affected: Systems using objdump to process untrusted binaries or debug information.
Urgency: Medium severity (CVSS 5.5) DoS impact; exploit requires malformed binary input.
Action: Update GNU Binutils to version containing the debug_rnglists header handling fix.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch Binutils

Get an email when a new Binutils advisory drops — max one per day, one-click unsubscribe.

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Low exploitation riskCVE-2025-696460.15% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 5% of all EPSS-scored CVEs.

CVE	CSIRTS overview	External
CVE-2025-69646	coverage & exploitation status	NVD · CVE.org