Multiple Denial-of-Service Vulnerabilities in GNU Binutils Disclosed

Multiple Denial-of-Service Vulnerabilities in GNU Binutils Disclosed

First seen 11 Mar 2026, 07:26 UTC Api.Msrc.Microsoft 76% similarity 57.8

Article Content

Browse articles
ThreatCluster

A series of denial-of-service vulnerabilities affecting GNU Binutils versions up to 2.46 have been disclosed. These vulnerabilities, identified as CVE-2025-69644, CVE-2025-69645, CVE-2025-69646, CVE-2025-69650, CVE-2025-69651, and CVE-2025-69652, can be triggered by processing crafted ELF binaries or malformed DWARF debug information, leading to program crashes or unbounded logging loops. All vulnerabilities were published on March 6, 2026, and affect local users who can supply malicious input files.

ThreatCluster AI How this analysis works

Timeline

2026-03-06
CVE-2025-69644, 69645, 69646, 69650, 69651, 69652 published
2026-03-06
CVE-2025-69646 published
2026-03-06
CVE-2025-69652 published
2026-03-06
CVE-2025-69645 published
2026-03-06
CVE-2025-69650 published
2026-03-06
CVE-2025-69651 published
2026-03-11
Multiple articles published detailing vulnerabilities

Community

Browse all →

Tracked Entities in This Story