CVE-2025-66864
Unknown Unknown - Not Provided

Denial of Service in BinUtils 2.26 via PE File Parsing

Publication date: 2025-12-29

Last updated on: 2025-12-29

Assigner: MITRE

Description
An issue was discovered in function d_print_comp_inner in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2025-12-29
Last Modified
2025-12-29
Generated
2026-07-06
AI Q&A
2025-12-29
EPSS Evaluated
2026-07-05
NVD
CVE-2025-66864

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
gnu binutils 2.26

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a flaw in the function d_print_comp_inner within the cp-demangle.c file of BinUtils version 2.26. It allows attackers to cause a denial of service by using a specially crafted PE (Portable Executable) file.

Impact Analysis

The vulnerability can impact you by causing a denial of service condition, which means that the affected BinUtils software could crash or become unresponsive when processing a maliciously crafted PE file.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-66864. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart