CVE-2025-69647

Range taken from the CVE record, check it before committing. make newentry in security/vuxml creates the vid.

  <vuln vid="FIXME (make newentry)">
    <topic>FIXME -- FIXME</topic>
    <affects>
      <package>
	<name>aarch64-binutils</name>
	<range><lt>FIXME</lt></range>
      </package>
      <package>
	<name>aarch64-none-elf-binutils</name>
	<range><lt>FIXME</lt></range>
      </package>
      <package>
	<name>amd64-binutils</name>
	<range><lt>FIXME</lt></range>
      </package>
      <package>
	<name>arm-gnueabi-binutils</name>
	<range><lt>FIXME</lt></range>
      </package>
      <package>
	<name>arm-none-eabi-binutils</name>
	<range><lt>FIXME</lt></range>
      </package>
      <package>
	<name>avr-binutils</name>
	<range><lt>FIXME</lt></range>
      </package>
      <package>
	<name>binutils</name>
	<range><lt>FIXME</lt></range>
      </package>
      <package>
	<name>i386-binutils</name>
	<range><lt>FIXME</lt></range>
      </package>
      <package>
	<name>mingw32-binutils</name>
	<range><lt>FIXME</lt></range>
      </package>
      <package>
	<name>powerpc-binutils</name>
	<range><lt>FIXME</lt></range>
      </package>
      <package>
	<name>powerpc64-binutils</name>
	<range><lt>FIXME</lt></range>
      </package>
      <package>
	<name>powerpc64le-binutils</name>
	<range><lt>FIXME</lt></range>
      </package>
      <package>
	<name>riscv32-unknown-elf-binutils</name>
	<range><lt>FIXME</lt></range>
      </package>
      <package>
	<name>riscv64-binutils</name>
	<range><lt>FIXME</lt></range>
      </package>
      <package>
	<name>riscv64-none-elf-binutils</name>
	<range><lt>FIXME</lt></range>
      </package>
      <package>
	<name>s390x-binutils</name>
	<range><lt>FIXME</lt></range>
      </package>
      <package>
	<name>gnatcross-binutils-aarch64</name>
	<range><lt>FIXME</lt></range>
      </package>
      <package>
	<name>gnatdroid-binutils</name>
	<range><lt>FIXME</lt></range>
      </package>
      <package>
	<name>gnatdroid-binutils-x86</name>
	<range><lt>FIXME</lt></range>
      </package>
    </affects>
    <description>
      <body xmlns="http://www.w3.org/1999/xhtml">
	<p>GNU Binutils thru 2.45.1 readelf contains a denial-of-service
	vulnerability when processing a crafted binary with malformed DWARF
	loclists data. A logic flaw in the DWARF parsing code can cause
	readelf to repeatedly print the same table output without making
	forward progress, resulting in an unbounded output loop that never
	terminates unless externally interrupted. A local attacker can trigger
	this behavior by supplying a malicious input file, causing excessive
	CPU and I/O usage and preventing readelf from completing its analysis.</p>
      </body>
    </description>
    <references>
      <cvename>CVE-2025-69647</cvename>
      <url>https://nvd.nist.gov/vuln/detail/CVE-2025-69647</url>
    </references>
    <dates>
      <discovery>2026-03-09</discovery>
      <entry>2026-10-25</entry>
    </dates>
  </vuln>