MEDIUM 5.5 Microsoft

CVE-2025-69649

GNU Binutils thru 2.46 readelf contains a null pointer dereference vulnerability when processing a crafted ELF binary with malformed header fields. During relocation processing, an invalid or null section pointer may be passed into display_relocations(), resulting in a segmentation fault (SIGSEGV) and abrupt termination. No evidence of memory corruption beyond the null pointer dereference, nor any possibility of code execution, was observed.

Microsoft Security Update 2026-Mar: GNU Binutils thru 2.46 readelf contains a null pointer dereference vulnerability when processing a crafted ELF binary with malformed header fields. During relocation processing, an invalid or null section pointer may be passed into display_relocations(), resulting in a segmentation fault (SIGSEGV) and abrupt termination. No evidence of memory corruption beyond the null pointer dereference, nor any possibility of code execution, was observed.

Affected Products

References

Published: 2026-03-10 · Source: Microsoft · Feed updated: 2026-09-25
This medium severity vulnerability with a CVSS score of 5.5 was published on 2026-03-10 via Microsoft. Affected: cbl2 binutils 2.37-20 on CBL-Mariner 2.0, azl3 binutils 2.41-10 on Azure Linux 3.0, cbl2 binutils 2.37-20 on CBL Mariner 2.0 and 2 more.
vulnfeed aggregates 10851 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.