Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Binutils readelf can crash from malformed file

CVE-2025-69650 · published 8 months ago
Summary

The readelf tool in GNU Binutils versions up to 2.46 may stop working when it tries to examine a specially crafted executable file that contains incorrect relocation information. This causes the program to abort, preventing it from completing its task and potentially disrupting build or analysis processes. Upgrade Binutils to the latest patched release to avoid the crash.

What to do
  • Update alpine binutils to version 2.44-r30072.
  • Update alpine rootio-binutils to version 2.44-r30072.
  • Update alpine binutils to version 2.45.1-r10072.
  • Update alpine rootio-binutils to version 2.45.1-r10072.
  • Update alpine binutils to version 2.45.1-r10073.
  • Update alpine rootio-binutils to version 2.45.1-r10073.
  • Update binutils to version 2.45.1-r10074.
  • Update rootio-binutils to version 2.45.1-r10074.
  • Update binutils to version 2.44-r30073.
  • Update rootio-binutils to version 2.44-r30073.
  • Update binutils to version 2.45.1-r00073.
  • Update rootio-binutils to version 2.45.1-r00073.
Affected software
Ecosystem VendorProductAffected versions
– gnu binutils <= 2.46
cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*
Ubuntu:Pro:14.04:LTS canonical binutils All versions
Ubuntu:Pro:16.04:LTS canonical binutils All versions
Ubuntu:Pro:18.04:LTS canonical binutils All versions
Ubuntu:Pro:20.04:LTS canonical binutils All versions
Ubuntu:22.04:LTS canonical binutils All versions
Ubuntu:24.04:LTS canonical binutils All versions
Root:Alpine:3.22 alpine binutils < 2.44-r30072
Fix: upgrade to 2.44-r30072
Root:Alpine:3.22 alpine rootio-binutils < 2.44-r30072
Fix: upgrade to 2.44-r30072
Ubuntu:25.10 canonical binutils All versions
Debian:11 debian binutils All versions
Debian:12 debian binutils All versions
Debian:13 debian binutils All versions
Debian:14 debian binutils All versions
Root:Alpine:3.24 alpine binutils < 2.45.1-r10072
< 2.45.1-r10073
Fix: upgrade to 2.45.1-r10072
Root:Alpine:3.24 alpine rootio-binutils < 2.45.1-r10072
< 2.45.1-r10073
Fix: upgrade to 2.45.1-r10072
Root:Alpine:3.24 – binutils < 2.45.1-r10074
Fix: upgrade to 2.45.1-r10074
Root:Alpine:3.24 – rootio-binutils < 2.45.1-r10074
Fix: upgrade to 2.45.1-r10074
Root:Alpine:3.22 – binutils < 2.44-r30073
Fix: upgrade to 2.44-r30073
Root:Alpine:3.22 – rootio-binutils < 2.44-r30073
Fix: upgrade to 2.44-r30073
Root:Alpine:3.23 – binutils < 2.45.1-r00073
Fix: upgrade to 2.45.1-r00073
Root:Alpine:3.23 – rootio-binutils < 2.45.1-r00073
Fix: upgrade to 2.45.1-r00073
Original advisory text
CVE-2025-69650 in binutils - Patched by Root
GNU Binutils thru 2.46 readelf contains a double free vulnerability when processing a crafted ELF binary with malformed relocation data. During GOT relocation handling, dump_relocations may return early without initializing the all_relocations array. As a result, process_got_section_contents() may pass an uninitialized r_symbol pointer to free(), leading to a double free and terminating the program with SIGABRT. No evidence of exploitable memory corruption or code execution was observed; the impact is limited to denial of service. NOTE: this is disputed by third parties because the observed behavior occurred only in pre-release code and did not affect any tagged version.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
7.5 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-415Double Free
Timeline
Published6 Mar 2026
Updated4 Nov 2026
First seen6 Mar 2026
Sources
CVE-2025-69650 · NVD
DEBIAN-CVE-2025-69650 · OSV
UBUNTU-CVE-2025-69650 · OSV
ROOT-OS-ALPINE-324-CVE-2025-69650 · OSV
ROOT-OS-ALPINE-322-CVE-2025-69650 · OSV
CVE-2025-69650 · OSV
ROOT-OS-ALPINE-323-CVE-2025-69650 · OSV
Track software like this
Free during beta