Skip to main content
Version: v1.1.x

CVE-2025-69648

CVE Details

Visit the official vulnerability details page for CVE-2025-69648 to learn more.

Initial Publication

03/09/2026

Last Update

03/13/2026

Third Party Dependency

binutils

NIST CVE Summary

GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF .debug_rnglists data. A logic flaw in the DWARF parsing path causes readelf to repeatedly print the same warning message without making forward progress, resulting in a non-terminating output loop that requires manual interruption. No evidence of memory corruption or code execution was observed.

CVE Severity

6.2

Our Official Summary

Investigation is ongoing to determine how this vulnerability affects our products.

Status

Analyzed

Affected Products & Versions

VersionPaletteAIPaletteAI VerteX
1.1.0⚠️ Impacted⚠️ Impacted
1.0.7⚠️ Impacted⚠️ Impacted

Revision History

No revisions available.