Cloud Vulnerability DB
A community-led vulnerabilities database
Vulnerability DatabaseCVE-2025-5245
CVE-2025-5245:
NixOS vulnerability analysis and mitigation
Overview
A critical vulnerability (CVE-2025-5245) has been discovered in GNU Binutils versions up to 2.44, affecting the debugtypesamep function within the /binutils/debug.c file of the objdump component. The vulnerability was disclosed on May 27, 2025 (NVD, Wiz).
Technical details
The vulnerability leads to memory corruption and is classified under CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer). It has received a CVSS v4.0 score of 4.8 (Medium) with vector string CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N, and a CVSS v3.1 score of 5.3 (Medium) with vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L (VulDB).
Impact
The vulnerability can result in memory corruption when exploited. Local access is required to execute the attack, and successful exploitation could lead to system compromise within the context of the affected component (NVD).
Mitigation and workarounds
It is recommended to apply the available patch to fix this issue. A bugfix has been made available through the GNU Binutils repository (VulDB).
Additional resources
Source: This report was generated using AI
Related NixOS vulnerabilities:
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Additional Wiz resources
Get a personalized demo
Ready to see Wiz in action?
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management