Out-of-bounds write in Binutils - CVE-2025-7546

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU114344

Out-of-bounds write in Binutils - CVE-2025-7546

Published: August 21, 2025


Vulnerability identifier: #VU114344
CSH Severity: Low
CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-7546
CWE-ID: CWE-787
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error within the bfd_elf_set_group_contents() function in bfd/elf.c. A local user can trigger an out-of-bounds write and execute arbitrary code on the target system.


Affected software

Binutils
SUSE Linux Enterprise Server 15 SP3
SUSE Manager Server 4.3
SUSE Linux Enterprise Server 15 SP4
SUSE Manager Retail Branch Server 4.3
SUSE Linux Enterprise Server 15 SP5
SUSE Manager Proxy 4.3
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Enterprise Storage
Development Tools Module
Basesystem Module
SUSE Package Hub 15
openSUSE Leap
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
Ubuntu
Anolis OS
openEuler
Fedora
openucx-tools-debuginfo
libuct0-64bit-debuginfo
libucp-devel
libucm0-64bit
libucp0
libuct0
libuct-devel
libucm0
libucs-devel
libucs0-debuginfo
libucp0-debuginfo
openucx-debugsource
openucx-tools
libucs0
libucm0-debuginfo
libuct0-debuginfo
libucm-devel
libuct0-64bit
libucp0-64bit
libucs0-64bit
libucp0-64bit-debuginfo
libucs0-64bit-debuginfo
libucm0-64bit-debuginfo
openucx-debuginfo
binutils (Ubuntu package)
binutils-doc
binutils-gold
binutils-devel
binutils
mingw-binutils
cross-pru-binutils-debuginfo
binutils-debugsource
cross-hppa64-binutils
cross-m68k-binutils-debuginfo
cross-s390-binutils-debugsource
cross-ppc-binutils-debugsource
cross-mips-binutils-debugsource
cross-i386-binutils-debuginfo
cross-sparc-binutils
binutils-debuginfo
cross-hppa64-binutils-debugsource
libctf0
cross-xtensa-binutils-debuginfo
cross-i386-binutils
cross-ppc64-binutils-debugsource
cross-epiphany-binutils-debuginfo
cross-rx-binutils
cross-bpf-binutils
cross-i386-binutils-debugsource
libctf-nobfd0-debuginfo
cross-xtensa-binutils-debugsource
cross-xtensa-binutils
cross-s390-binutils
cross-spu-binutils-debugsource
cross-bpf-binutils-debuginfo
cross-arm-binutils
cross-arm-binutils-debuginfo
cross-pru-binutils
cross-epiphany-binutils-debugsource
cross-rx-binutils-debuginfo
cross-epiphany-binutils
cross-spu-binutils
cross-hppa-binutils-debuginfo
cross-rx-binutils-debugsource
cross-ia64-binutils
cross-s390-binutils-debuginfo
cross-ppc-binutils
cross-sparc64-binutils
libctf-nobfd0
cross-m68k-binutils-debugsource
cross-hppa-binutils
cross-ppc-binutils-debuginfo
cross-riscv64-binutils
cross-avr-binutils-debugsource
cross-ppc64le-binutils-debugsource
cross-ia64-binutils-debuginfo
cross-ia64-binutils-debugsource
cross-avr-binutils-debuginfo
cross-sparc64-binutils-debuginfo
binutils-devel-32bit
cross-aarch64-binutils-debuginfo
cross-aarch64-binutils
cross-aarch64-binutils-debugsource
cross-sparc-binutils-debugsource
cross-ppc64le-binutils
cross-ppc64le-binutils-debuginfo
cross-s390x-binutils-debuginfo
cross-s390x-binutils
cross-s390x-binutils-debugsource
cross-x86_64-binutils-debuginfo
cross-x86_64-binutils
cross-x86_64-binutils-debugsource
cross-spu-binutils-debuginfo
cross-mips-binutils
cross-hppa-binutils-debugsource
cross-ppc64-binutils-debuginfo
cross-avr-binutils
cross-pru-binutils-debugsource
cross-sparc64-binutils-debugsource
cross-riscv64-binutils-debuginfo
cross-m68k-binutils
cross-ppc64-binutils
cross-riscv64-binutils-debugsource
cross-hppa64-binutils-debuginfo
cross-sparc-binutils-debuginfo
libctf0-debuginfo
cross-bpf-binutils-debugsource
cross-arm-binutils-debugsource
cross-mips-binutils-debuginfo
gprofng
gprofng-debuginfo
perf-debuginfo
perf-debugsource
perf
perf-devel
perf-gtk
perf-gtk-debuginfo
perf-bash-completion
bpftool-debuginfo
bpftool-debugsource
bpftool
bpftool-bash-completion
gdb
gdb-debugsource
gdb-debuginfo
gdb-gdbserver
gdb-headless
gdb-help

How to mitigate CVE-2025-7546

Install updates from vendor's website.

openucx-tools-debuginfo - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libuct0-64bit-debuginfo - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1
libucp-devel - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libucm0-64bit - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1
libucp0 - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libuct0 - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libuct-devel - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libucm0 - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libucs-devel - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libucs0-debuginfo - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libucp0-debuginfo - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
openucx-debugsource - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
openucx-tools - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libucs0 - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libucm0-debuginfo - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libuct0-debuginfo - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libucm-devel - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libuct0-64bit - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1
libucp0-64bit - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1
libucs0-64bit - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1
libucp0-64bit-debuginfo - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1
libucs0-64bit-debuginfo - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1
libucm0-64bit-debuginfo - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1
openucx-debuginfo - addressed in versions 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
binutils (Ubuntu package) - addressed in versions 2.38-4ubuntu2.10, 2.42-4ubuntu2.6, 2.44-3ubuntu1.1
binutils-doc - update to 2.41-7
binutils-gold - update to 2.41-7
binutils-devel - update to 2.41-7
binutils - update to 2.41-7
mingw-binutils - addressed in versions 2.42-3.fc41, 2.43.1-4.fc42
cross-pru-binutils-debuginfo - update to 2.45-150100.7.57.1
binutils-debugsource - addressed in versions 2.45-150100.7.57.1, 2.45-160000.1.1
cross-hppa64-binutils - update to 2.45-150100.7.57.1
cross-m68k-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-s390-binutils-debugsource - update to 2.45-150100.7.57.1
cross-ppc-binutils-debugsource - update to 2.45-150100.7.57.1
cross-mips-binutils-debugsource - update to 2.45-150100.7.57.1
cross-i386-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-sparc-binutils - update to 2.45-150100.7.57.1
binutils-debuginfo - addressed in versions 2.45-150100.7.57.1, 2.45-160000.1.1
cross-hppa64-binutils-debugsource - update to 2.45-150100.7.57.1
libctf0 - addressed in versions 2.45-150100.7.57.1, 2.45-160000.1.1
cross-xtensa-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-i386-binutils - update to 2.45-150100.7.57.1
cross-ppc64-binutils-debugsource - update to 2.45-150100.7.57.1
cross-epiphany-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-rx-binutils - update to 2.45-150100.7.57.1
cross-bpf-binutils - update to 2.45-150100.7.57.1
cross-i386-binutils-debugsource - update to 2.45-150100.7.57.1
libctf-nobfd0-debuginfo - addressed in versions 2.45-150100.7.57.1, 2.45-160000.1.1
cross-xtensa-binutils-debugsource - update to 2.45-150100.7.57.1
cross-xtensa-binutils - update to 2.45-150100.7.57.1
cross-s390-binutils - update to 2.45-150100.7.57.1
cross-spu-binutils-debugsource - update to 2.45-150100.7.57.1
cross-bpf-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-arm-binutils - update to 2.45-150100.7.57.1
cross-arm-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-pru-binutils - update to 2.45-150100.7.57.1
cross-epiphany-binutils-debugsource - update to 2.45-150100.7.57.1
cross-rx-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-epiphany-binutils - update to 2.45-150100.7.57.1
cross-spu-binutils - update to 2.45-150100.7.57.1
cross-hppa-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-rx-binutils-debugsource - update to 2.45-150100.7.57.1
cross-ia64-binutils - update to 2.45-150100.7.57.1
cross-s390-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-ppc-binutils - update to 2.45-150100.7.57.1
cross-sparc64-binutils - update to 2.45-150100.7.57.1
libctf-nobfd0 - addressed in versions 2.45-150100.7.57.1, 2.45-160000.1.1
cross-m68k-binutils-debugsource - update to 2.45-150100.7.57.1
cross-hppa-binutils - update to 2.45-150100.7.57.1
binutils-devel - addressed in versions 2.45-150100.7.57.1, 2.45-160000.1.1
cross-ppc-binutils-debuginfo - update to 2.45-150100.7.57.1
binutils - addressed in versions 2.45-150100.7.57.1, 2.45-160000.1.1
cross-riscv64-binutils - update to 2.45-150100.7.57.1
cross-avr-binutils-debugsource - update to 2.45-150100.7.57.1
cross-ppc64le-binutils-debugsource - update to 2.45-150100.7.57.1
cross-ia64-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-ia64-binutils-debugsource - update to 2.45-150100.7.57.1
cross-avr-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-sparc64-binutils-debuginfo - update to 2.45-150100.7.57.1
binutils-devel-32bit - update to 2.45-150100.7.57.1
cross-aarch64-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-aarch64-binutils - update to 2.45-150100.7.57.1
cross-aarch64-binutils-debugsource - update to 2.45-150100.7.57.1
cross-sparc-binutils-debugsource - update to 2.45-150100.7.57.1
cross-ppc64le-binutils - update to 2.45-150100.7.57.1
cross-ppc64le-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-s390x-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-s390x-binutils - update to 2.45-150100.7.57.1
cross-s390x-binutils-debugsource - update to 2.45-150100.7.57.1
cross-x86_64-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-x86_64-binutils - update to 2.45-150100.7.57.1
cross-x86_64-binutils-debugsource - update to 2.45-150100.7.57.1
cross-spu-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-mips-binutils - update to 2.45-150100.7.57.1
cross-hppa-binutils-debugsource - update to 2.45-150100.7.57.1
cross-ppc64-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-avr-binutils - update to 2.45-150100.7.57.1
cross-pru-binutils-debugsource - update to 2.45-150100.7.57.1
cross-sparc64-binutils-debugsource - update to 2.45-150100.7.57.1
cross-riscv64-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-m68k-binutils - update to 2.45-150100.7.57.1
cross-ppc64-binutils - update to 2.45-150100.7.57.1
cross-riscv64-binutils-debugsource - update to 2.45-150100.7.57.1
cross-hppa64-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-sparc-binutils-debuginfo - update to 2.45-150100.7.57.1
libctf0-debuginfo - addressed in versions 2.45-150100.7.57.1, 2.45-160000.1.1
cross-bpf-binutils-debugsource - update to 2.45-150100.7.57.1
cross-arm-binutils-debugsource - update to 2.45-150100.7.57.1
cross-mips-binutils-debuginfo - update to 2.45-150100.7.57.1
gprofng - update to 2.45-160000.1.1
gprofng-debuginfo - update to 2.45-160000.1.1
perf-debuginfo - addressed in versions 5.3.18-150300.38.7.1, 5.14.21-150400.44.20.1, 5.14.21-150500.52.5.1, 6.4.0.git33229.a3afe13a7f-150600.3.17.1, 6.4.0.git54263.0aad576b1c-150700.3.2.2
perf-debugsource - addressed in versions 5.3.18-150300.38.7.1, 5.14.21-150400.44.20.1, 5.14.21-150500.52.5.1, 6.4.0.git33229.a3afe13a7f-150600.3.17.1, 6.4.0.git54263.0aad576b1c-150700.3.2.2
perf - addressed in versions 5.3.18-150300.38.7.1, 5.14.21-150400.44.20.1, 5.14.21-150500.52.5.1, 6.4.0.git33229.a3afe13a7f-150600.3.17.1, 6.4.0.git54263.0aad576b1c-150700.3.2.2
perf-devel - addressed in versions 5.14.21-150400.44.20.1, 5.14.21-150500.52.5.1, 6.4.0.git33229.a3afe13a7f-150600.3.17.1, 6.4.0.git54263.0aad576b1c-150700.3.2.2
perf-gtk - update to 6.4.0.git33229.a3afe13a7f-150600.3.17.1
perf-gtk-debuginfo - update to 6.4.0.git33229.a3afe13a7f-150600.3.17.1
perf-bash-completion - update to 6.4.0.git33229.a3afe13a7f-150600.3.17.1
bpftool-debuginfo - update to 7.5.0-160000.2.3
bpftool-debugsource - update to 7.5.0-160000.2.3
bpftool - update to 7.5.0-160000.2.3
bpftool-bash-completion - update to 7.5.0-160000.2.3
gdb - update to 14.1-5
gdb-debugsource - update to 14.1-5
gdb-debuginfo - update to 14.1-5
gdb-gdbserver - update to 14.1-5
gdb-headless - update to 14.1-5
gdb-help - update to 14.1-5

External References

Related Security Bulletins