CVE-2025-69651 describes a vulnerability in GNU Binutils readelf (up to version 2.46) where malformed ELF binaries with incorrect relocation or symbol data can cause an invalid pointer free. Specifically, if dump_relocations exits early due to parsing errors, the all_relocations array may be partially uninitialized. Later, process_got_section_contents() attempts to free an invalid r_symbol pointer, triggering memory corruption detection in glibc and causing the program to terminate with SIGABRT. The vulnerability results in denial of service but no confirmed memory corruption beyond the abort or code execution. The issue is disputed because it was only observed in pre-release code and not in any tagged release versions. No patch information is currently available.

The vulnerability leads to a denial of service condition by causing readelf to abort when processing specially crafted ELF binaries. There is no confirmed impact on confidentiality or integrity, and no evidence of code execution or further memory corruption beyond the program termination. The denial of service is triggered by an invalid pointer free during ELF parsing.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vulnerability is disputed and reportedly only affects pre-release code, no immediate action may be required for tagged releases. Monitor vendor communications for any official fixes or updates.