CVE-2025-69649

GNU Binutils, up to version 2.46, has a null pointer dereference vulnerability in the readelf tool when it processes a specially crafted ELF binary that contains malformed header fields. During the relocation processing, an invalid or null section pointer can be passed into the display_relocations() function, leading to a segmentation fault (SIGSEGV) and subsequent abrupt termination of the program. There is no evidence of memory corruption beyond the null pointer dereference, and no potential for code execution has been observed.

‍