CVE-2025-3198

Range taken from the CVE record, check it before committing. make newentry in security/vuxml creates the vid.

  <vuln vid="FIXME (make newentry)">
    <topic>FIXME -- FIXME</topic>
    <affects>
      <package>
	<name>aarch64-binutils</name>
	<range><lt>FIXME</lt></range>
      </package>
      <package>
	<name>aarch64-none-elf-binutils</name>
	<range><lt>FIXME</lt></range>
      </package>
      <package>
	<name>amd64-binutils</name>
	<range><lt>FIXME</lt></range>
      </package>
      <package>
	<name>arm-gnueabi-binutils</name>
	<range><lt>FIXME</lt></range>
      </package>
      <package>
	<name>arm-none-eabi-binutils</name>
	<range><lt>FIXME</lt></range>
      </package>
      <package>
	<name>avr-binutils</name>
	<range><lt>FIXME</lt></range>
      </package>
      <package>
	<name>binutils</name>
	<range><lt>FIXME</lt></range>
      </package>
      <package>
	<name>i386-binutils</name>
	<range><lt>FIXME</lt></range>
      </package>
      <package>
	<name>mingw32-binutils</name>
	<range><lt>FIXME</lt></range>
      </package>
      <package>
	<name>powerpc-binutils</name>
	<range><lt>FIXME</lt></range>
      </package>
      <package>
	<name>powerpc64-binutils</name>
	<range><lt>FIXME</lt></range>
      </package>
      <package>
	<name>powerpc64le-binutils</name>
	<range><lt>FIXME</lt></range>
      </package>
      <package>
	<name>riscv32-unknown-elf-binutils</name>
	<range><lt>FIXME</lt></range>
      </package>
      <package>
	<name>riscv64-binutils</name>
	<range><lt>FIXME</lt></range>
      </package>
      <package>
	<name>riscv64-none-elf-binutils</name>
	<range><lt>FIXME</lt></range>
      </package>
      <package>
	<name>s390x-binutils</name>
	<range><lt>FIXME</lt></range>
      </package>
    </affects>
    <description>
      <body xmlns="http://www.w3.org/1999/xhtml">
	<p>A vulnerability has been found in GNU Binutils 2.43/2.44 and
	classified as problematic. Affected by this vulnerability is the
	function display_info of the file binutils/bucomm.c of the component
	objdump. The manipulation leads to memory leak. An attack has to be
	approached locally. The exploit has been disclosed to the public and
	may be used. The patch is named
	ba6ad3a18cb26b79e0e3b84c39f707535bbc344d. It is recommended to apply a
	patch to fix this issue.</p>
      </body>
    </description>
    <references>
      <cvename>CVE-2025-3198</cvename>
      <url>https://nvd.nist.gov/vuln/detail/CVE-2025-3198</url>
    </references>
    <dates>
      <discovery>2025-04-04</discovery>
      <entry>2026-10-25</entry>
    </dates>
  </vuln>