GNU Binutils thru 2.46 readelf contains a double free vulnerability when processing a crafted ELF binary with malformed relocation data. During GOT relocation handling, dump_relocations may return early without initializing the all_relocations array. As a result, process_got_section_contents() may pass an uninitialized r_symbol pointer to free(), leading to a double free and terminating the program with SIGABRT. No evidence of exploitable memory corruption or code execution was observed; the impact is limited to denial of service.
CVSS
No CVSS.
References
Configurations
No configuration.
History
06 Mar 2026, 19:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-03-06 19:16
Updated : 2026-03-06 19:16
NVD link : CVE-2025-69650
Mitre link : CVE-2025-69650
CVE.ORG link : CVE-2025-69650
JSON object : View
Products Affected
No product.
CWE
No CWE.
