CVE-2025-0840

Summary

CVE-2025-0840 is a newly disclosed vulnerability affecting GNU Binutils up to version 2.43. This issue lies in the function "disassemble\_bytes" of the file "objdump.c". An attacker can exploit this stack-based buffer overflow vulnerability by manipulating the argument "buf". The complexity of an attack is relatively high, and exploitability is considered difficult but has been publicly disclosed. To mitigate this risk, it's recommended to upgrade to version 2.44, with the patch identifier being baac6c221e9d69335bf41366a1c7d87d8ab2f893.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.