CVE-2025-69648

GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF .debugrnglists data. A logic flaw in the DWARF parsing path causes readelf to repeatedly print the same warning message without making forward progress, resulting in a...

CVE-2025-69646

Binutils objdump is affected by a denial-of-service due to a logic error in handling the DWARF debug_rnglists header. A crafted input file can trigger repeated warning messages and an unbounded logging loop, causing excessive CPU and I/O usage and preventing completion of the objdump analysis. Th...