Cloud Vulnerability DB
An open project to list all known cloud vulnerabilities and Cloud Service Provider security issues
Vulnerability DatabaseCVE-2025-5245
CVE-2025-5245:
Linux Red Hat vulnerability analysis and mitigation
Overview
A critical vulnerability (CVE-2025-5245) has been discovered in GNU Binutils versions up to 2.44. The vulnerability affects the debugtypesamep function within the /binutils/debug.c file of the objdump component. This vulnerability was recently published and included in the NVD dataset on May 27, 2025 (NVD).
Technical details
The vulnerability leads to memory corruption and is classified under CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer). The CVSS v4.0 score is 4.8 (Medium) with vector string CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N, while the CVSS v3.1 score is 5.3 (Medium) with vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L (VulDB).
Impact
The vulnerability can result in memory corruption when exploited. Local access is required to execute the attack, and successful exploitation could lead to system compromise within the context of the affected component (NVD).
Mitigation and workarounds
It is recommended to apply the available patch to fix this issue. The vulnerability has been addressed in newer versions of GNU Binutils (NVD).
Additional resources
Source: This report was generated using AI
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
Ready to see Wiz in action?
“Best User Experience I have ever seen, provides full visibility to cloud workloads.”
David EstlickCISO
“Wiz provides a single pane of glass to see what is going on in our cloud environments.”
Adam FletcherChief Security Officer
“We know that if Wiz identifies something as critical, it actually is.”
Greg PoniatowskiHead of Threat and Vulnerability Management