CVE-2025-1147

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.43

Description A problem has been found in the function sanitizer::internal strlen of the file binutils/nm.c of the component nm. The manipulation of the argument const leads to buffer overflow. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult.

Recommendations For GNU Binutils version 2.43, as a temporary workaround, consider restricting access to the function sanitizer::internal strlen until a patch is available. Additionally, be cautious when using the const argument to minimize the risk of buffer overflow exploitation.