Double Free Vulnerability in GNU Binutils Affecting ELF Binary Processing

CVE-2025-69650

What is CVE-2025-69650?

The GNU Binutils software suite exhibits a double free vulnerability when processing manually crafted ELF binaries with improperly formatted relocation data. Specifically, during the handling of Global Offset Table (GOT) relocations, the dump_relocations function may terminate prematurely without initializing the all_relocations array. This oversight allows the function process_got_section_contents() to erroneously pass an uninitialized r_symbol pointer to the free() function. Consequently, this may result in a double free condition, which can lead to application instability and a potential denial of service. However, there is no evidence indicating that this vulnerability could be exploited for memory corruption or arbitrary code execution.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References