CVE-2025-66865

An issue was discovered in function d_print_comp_inner in file cp-demangle.c in BinUtils 2.26...

7.5 High

An issue was discovered in function d_print_comp_inner in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

0.38%Up 0.4 points since Dec 30, 2025

What each source reports

CVE List Score used 7.5

An issue was discovered in function d_print_comp_inner in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file.

Record: CVE-2025-66865
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-121
Updated: 2026-11-02

EUVDEUVD-2025-205618 7.5

An issue was discovered in function d_print_comp_inner in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file.

Record: EUVD-2025-205618
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-w539-2pgj-g759 7.5

An issue was discovered in function d_print_comp_inner in file cp-demangle.c in BinUtils 2.26...

An issue was discovered in function d_print_comp_inner in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file.

Record: GHSA-w539-2pgj-g759
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-121
Updated: 2026-11-02

NVD 7.5

An issue was discovered in function d_print_comp_inner in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file.

Record: CVE-2025-66865
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-121
Updated: 2026-11-02

OSVBELL-CVE-2025-66865 7.5

CVE-2025-66865 does not affect BellSoft software

Record: BELL-CVE-2025-66865
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSV 7.5

An issue was discovered in function d_print_comp_inner in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file.

Record: CVE-2025-66865
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

Show 7 moreShow less

OSVDEBIAN-CVE-2025-66865 7.5

An issue was discovered in function d_print_comp_inner in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file.

Record: DEBIAN-CVE-2025-66865
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2026:7098 5.3

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record: RHSA-2026:7098
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Updated: 2026-11-02

OSVUBUNTU-CVE-2025-66865 7.5

An issue was discovered in function d_print_comp_inner in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file.

Record: UBUNTU-CVE-2025-66865
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVCLSA-2026-1775148022 No score

binutils: Fix of 3 CVEs

CVE-2025-66862: fix heap-buffer-overflow in gnu_special in cplus-dem.c
CVE-2025-66863: fix SEGV in d_discriminator in cp-demangle.c
CVE-2025-66865: fix stack overflow in d_print_comp in cp-demangle.c

Record: CLSA-2026-1775148022
Updated: 2026-11-02

OSVCLSA-2026-1775148284 No score

binutils: Fix of 3 CVEs

CVE-2025-66862: fix heap-buffer-overflow in gnu_special in cplus-dem.c
CVE-2025-66863: fix SEGV in d_discriminator in cp-demangle.c
CVE-2025-66865: fix stack overflow in d_print_comp in cp-demangle.c

Record: CLSA-2026-1775148284
Updated: 2026-11-02

OSVCLSA-2026-1777538339 No score

binutils: Fix of 4 CVEs

CVE-2025-66862: fix buffer overflow in gnu_special cplus-dem.c
CVE-2025-66863: fix denial of service in d_discriminator cp-demangle.c
CVE-2025-66865: fix denial of service in d_print_comp_inner cp-demangle.c
CVE-2025-7546: fix corrupted group section handling in elf.c

Record: CLSA-2026-1777538339
Updated: 2026-11-02

OSVCLSA-2026-1777541514 No score

binutils: Fix of 3 CVEs

CVE-2025-66862: fix buffer overflow in gnu_special cplus-dem.c
CVE-2025-66863: fix denial of service in d_discriminator cp-demangle.c
CVE-2025-66865: fix denial of service in d_print_comp_inner cp-demangle.c

Record: CLSA-2026-1777541514
Updated: 2026-11-02

Affected products

gnu binutils

Affected packages

Affected packages
Package	Affected	Fixed
`binutils` TuxCare:CentOS:6 From an advisory covering 3 CVEs	before 1:2.20.51.0.2-5.48.1.el6.tuxcare.els10	1:2.20.51.0.2-5.48.1.el6.tuxcare.els10
`binutils-devel` TuxCare:CentOS:6 From an advisory covering 3 CVEs	before 1:2.20.51.0.2-5.48.1.el6.tuxcare.els10	1:2.20.51.0.2-5.48.1.el6.tuxcare.els10
`binutils` TuxCare:OracleLinux:6 From an advisory covering 3 CVEs	before 1:2.20.51.0.2-5.48.1.el6.tuxcare.els10	1:2.20.51.0.2-5.48.1.el6.tuxcare.els10
`binutils-devel` TuxCare:OracleLinux:6 From an advisory covering 3 CVEs	before 1:2.20.51.0.2-5.48.1.el6.tuxcare.els10	1:2.20.51.0.2-5.48.1.el6.tuxcare.els10
`binutils` TuxCare:RHEL:7 From an advisory covering 4 CVEs	before 2.27-44.base.el7_9.1.tuxcare.els6	2.27-44.base.el7_9.1.tuxcare.els6
`binutils-devel` TuxCare:RHEL:7 From an advisory covering 4 CVEs	before 2.27-44.base.el7_9.1.tuxcare.els6	2.27-44.base.el7_9.1.tuxcare.els6
`binutils` TuxCare:CentOS:7 From an advisory covering 3 CVEs	before 2.27-44.base.el7_9.1.tuxcare.els6	2.27-44.base.el7_9.1.tuxcare.els6
`binutils-devel` TuxCare:CentOS:7 From an advisory covering 3 CVEs	before 2.27-44.base.el7_9.1.tuxcare.els6	2.27-44.base.el7_9.1.tuxcare.els6
`binutils` Debian:12	All versions, plus listed versions 2.40-22.40.50.20230111-12.40.50.20230215-12.40.50.20230501-12.40.50.20230510-1 Show 45 moreShow less 2.40.50.20230602-12.40.50.20230611-12.40.50.20230611-22.40.50.20230622-12.40.50.20230625-12.40.50.20230630-12.40.90.20230705-12.40.90.20230714-12.40.90.20230714-22.40.90.20230720-12.40.90.20230729-12.40.90.20230729-22.41-12.41-22.41-32.41-42.41-52.41-62.41-72.41.50.20230731-12.41.50.20230803-12.41.50.20230905-12.41.50.20231010-12.41.50.20231101-12.41.50.20231125-12.41.50.20231202-12.41.50.20231206-12.41.50.20231214-12.41.50.20231227-12.41.90.20240115-12.41.90.20240122-12.42-12.42-22.42-2+hurd.12.42-32.42-42.42.50.20240614-12.42.50.20240618-12.42.50.20240625-12.42.50.20240710-12.42.90.20240720-12.42.90.20240720-22.43-12.43-22.43.1-1	None known
`binutils` Debian:13	All versions, plus listed versions 2.44-32.44.50.20250201-12.44.50.20250207-12.44.50.20250218-12.44.50.20250218-2 Show 45 moreShow less 2.44.50.20250309-12.44.50.20250405-12.44.50.20250502-12.44.50.20250520-12.44.50.20250528-12.44.50.20250707-12.44.90.20250719-12.45-12.45-22.45-32.45-42.45-52.45-62.45-72.45-82.45.50.20250813-12.45.50.20250903-12.45.50.20251005-12.45.50.20251023-12.45.50.20251023-22.45.50.20251122-12.45.50.20251125-12.45.50.20251201-12.45.50.20251209-12.45.50.20260116-12.45.50.20260119-12.45.90.20260125-12.45.90.20260201-12.46-12.46-22.46-32.46.50.20260216-12.46.50.20260509-12.46.50.20260519-12.46.50.20260608-12.46.50.20260617-12.46.90.20260712-12.47-12.47-22.47-32.47-42.47-52.47-62.47.50.20260813-12.47.50.20260813-2	None known

Show 14 moreShow less

Affected packages
Package	Affected	Fixed
`binutils` Debian:14	All versions, plus listed versions 2.44-32.44.50.20250201-12.44.50.20250207-12.44.50.20250218-12.44.50.20250218-2 Show 45 moreShow less 2.44.50.20250309-12.44.50.20250405-12.44.50.20250502-12.44.50.20250520-12.44.50.20250528-12.44.50.20250707-12.44.90.20250719-12.45-12.45-22.45-32.45-42.45-52.45-62.45-72.45-82.45.50.20250813-12.45.50.20250903-12.45.50.20251005-12.45.50.20251023-12.45.50.20251023-22.45.50.20251122-12.45.50.20251125-12.45.50.20251201-12.45.50.20251209-12.45.50.20260116-12.45.50.20260119-12.45.90.20260125-12.45.90.20260201-12.46-12.46-22.46-32.46.50.20260216-12.46.50.20260509-12.46.50.20260519-12.46.50.20260608-12.46.50.20260617-12.46.90.20260712-12.47-12.47-22.47-32.47-42.47-52.47-62.47.50.20260813-12.47.50.20260813-2	None known
`binutils` Red Hat:hummingbird:1 From an advisory covering 25 CVEs	before 0:2.45.1-5.hum1	0:2.45.1-5.hum1
`binutils-devel` Red Hat:hummingbird:1 From an advisory covering 25 CVEs	before 0:2.45.1-5.hum1	0:2.45.1-5.hum1
`binutils-gold` Red Hat:hummingbird:1 From an advisory covering 25 CVEs	before 0:2.45.1-5.hum1	0:2.45.1-5.hum1
`binutils-gprofng` Red Hat:hummingbird:1 From an advisory covering 25 CVEs	before 0:2.45.1-5.hum1	0:2.45.1-5.hum1
`binutils` Ubuntu:Pro:14.04:LTS	All versions, plus listed versions 2.23.52.20130913-0ubuntu12.23.90.20131017-1ubuntu12.23.90.20131116-1ubuntu12.23.91.20131123-1ubuntu12.24-1ubuntu1 Show 20 moreShow less 2.24-1ubuntu22.24-2ubuntu12.24-2ubuntu22.24-2ubuntu32.24-4ubuntu12.24-5ubuntu12.24-5ubuntu22.24-5ubuntu32.24-5ubuntu3.12.24-5ubuntu132.24-5ubuntu142.24-5ubuntu14.12.24-5ubuntu14.22.24-5ubuntu14.2+esm12.24-5ubuntu14.2+esm22.24-5ubuntu14.2+esm32.24-5ubuntu14.2+esm52.24-5ubuntu14.2+esm62.24-5ubuntu14.2+esm72.24-5ubuntu14.2+esm8	None known
`binutils` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 2.25.1-6ubuntu12.25.51.20151022-0ubuntu22.25.51.20151022-0ubuntu32.25.51.20151027-0ubuntu12.25.51.20151028-0ubuntu1 Show 37 moreShow less 2.25.51.20151106-0ubuntu12.25.51.20151113-1ubuntu12.25.51.20151113-2ubuntu12.25.90.20151125-1ubuntu12.25.90.20151125-2ubuntu12.25.90.20151211-0ubuntu12.25.90.20151211-0ubuntu22.25.90.20160101-1ubuntu12.25.90.20160101-1ubuntu22.26-2ubuntu12.26-3ubuntu12.26-4ubuntu12.26-5ubuntu12.26-6ubuntu12.26-7ubuntu22.26-8ubuntu12.26-8ubuntu22.26-8ubuntu2.12.26.1-1ubuntu1~16.042.26.1-1ubuntu1~16.04.12.26.1-1ubuntu1~16.04.32.26.1-1ubuntu1~16.04.42.26.1-1ubuntu1~16.04.52.26.1-1ubuntu1~16.04.62.26.1-1ubuntu1~16.04.72.26.1-1ubuntu1~16.04.82.26.1-1ubuntu1~16.04.8+esm12.26.1-1ubuntu1~16.04.8+esm32.26.1-1ubuntu1~16.04.8+esm42.26.1-1ubuntu1~16.04.8+esm52.26.1-1ubuntu1~16.04.8+esm62.26.1-1ubuntu1~16.04.8+esm72.26.1-1ubuntu1~16.04.8+esm92.26.1-1ubuntu1~16.04.8+esm112.26.1-1ubuntu1~16.04.8+esm122.26.1-1ubuntu1~16.04.8+esm132.26.1-1ubuntu1~16.04.8+esm14	None known
`binutils` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 2.29.1-4ubuntu12.29.1-6ubuntu12.29.1-7ubuntu12.29.1-8ubuntu12.29.1-10ubuntu1 Show 25 moreShow less 2.29.1-12ubuntu12.30-4ubuntu12.30-5ubuntu12.30-7ubuntu12.30-8ubuntu12.30-9ubuntu12.30-10ubuntu12.30-11ubuntu12.30-14ubuntu22.30-15ubuntu12.30-20ubuntu2~18.042.30-21ubuntu1~18.042.30-21ubuntu1~18.04.12.30-21ubuntu1~18.04.22.30-21ubuntu1~18.04.32.30-21ubuntu1~18.04.42.30-21ubuntu1~18.04.52.30-21ubuntu1~18.04.72.30-21ubuntu1~18.04.82.30-21ubuntu1~18.04.92.30-21ubuntu1~18.04.9+esm12.30-21ubuntu1~18.04.9+esm32.30-21ubuntu1~18.04.9+esm42.30-21ubuntu1~18.04.9+esm52.30-21ubuntu1~18.04.9+esm13	None known
`binutils` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 2.33-2ubuntu12.33.1-1ubuntu12.33.1-5ubuntu12.33.1-6ubuntu12.33.1-6ubuntu3 Show 18 moreShow less 2.33.90.20200122-1ubuntu22.34-1ubuntu12.34-3ubuntu12.34-4ubuntu12.34-5ubuntu12.34-6ubuntu12.34-6ubuntu1.12.34-6ubuntu1.32.34-6ubuntu1.42.34-6ubuntu1.52.34-6ubuntu1.62.34-6ubuntu1.72.34-6ubuntu1.82.34-6ubuntu1.92.34-6ubuntu1.102.34-6ubuntu1.112.34-6ubuntu1.11+esm12.34-6ubuntu1.11+esm2	None known
`binutils` Ubuntu:22.04:LTS	All versions, plus listed versions 2.37-7ubuntu12.37-9ubuntu12.37-10ubuntu12.37.50.20220106-2ubuntu12.37.90.20220126-0ubuntu1 Show 16 moreShow less 2.37.90.20220130-0ubuntu22.38-1ubuntu12.38-2ubuntu12.38-3ubuntu12.38-4ubuntu22.38-4ubuntu2.12.38-4ubuntu2.22.38-4ubuntu2.32.38-4ubuntu2.42.38-4ubuntu2.52.38-4ubuntu2.62.38-4ubuntu2.72.38-4ubuntu2.82.38-4ubuntu2.102.38-4ubuntu2.112.38-4ubuntu2.12	None known
`binutils` Ubuntu:24.04:LTS	All versions, plus listed versions 2.41-5ubuntu12.41-6ubuntu12.41.50.20231206-1ubuntu12.41.50.20231214-1ubuntu12.41.50.20231227-1ubuntu1 Show 12 moreShow less 2.41.90.20240122-1ubuntu12.42-2ubuntu12.42-3ubuntu12.42-4ubuntu12.42-4ubuntu22.42-4ubuntu2.32.42-4ubuntu2.42.42-4ubuntu2.52.42-4ubuntu2.62.42-4ubuntu2.72.42-4ubuntu2.82.42-4ubuntu2.10	None known
`binutils` Ubuntu:25.10	All versions, plus listed versions 2.44-3ubuntu12.44.50.20250602-0ubuntu12.44.50.20250604-0ubuntu22.44.50.20250616-0ubuntu12.44.50.20250707-1ubuntu1 Show 6 moreShow less 2.45-1ubuntu12.45-3ubuntu32.45-6ubuntu12.45-7ubuntu12.45-7ubuntu1.12.45-7ubuntu1.2	None known
`binutils` Ubuntu:26.10	All versions, plus listed versions 2.46-3ubuntu22.46.50.20260608-1ubuntu12.47-2ubuntu12.47-6ubuntu1	None known
`binutils` Ubuntu:26.04:LTS	All versions, plus listed versions 2.45-7ubuntu12.45-7ubuntu22.45-8ubuntu12.45.50.20251125-1ubuntu12.45.50.20251201-1ubuntu1 Show 6 moreShow less 2.45.50.20251209-1ubuntu12.45.50.20260119-1ubuntu12.46-1ubuntu12.46-2ubuntu12.46-3ubuntu12.46-3ubuntu2	None known

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-66865 is a high vulnerability (CVSS 7.5) in Gnu Binutils, published December 29, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 31st percentile. No source names a fixed version.

References

Show 180 moreShow less

This page doesn't list everything

Left out here: 83 versions. The JSON record has them.