CVE-2025-1182

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.43

Description A critical vulnerability was found in GNU Binutils, affecting the function bfd elf reloc symbol deleted p of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. It is possible to launch the attack remotely. The complexity of an attack is rather high, and the exploitability is told to be difficult. The exploit has been disclosed to the public and may be used.

Recommendations To fix this issue, it is recommended to apply a patch, specifically the one identified as b425859021d17adf62f06fb904797cf8642986ad. As a temporary workaround, consider disabling the bfd elf reloc symbol deleted p function until a patch is available. Restrict access to the bfd/elflink.c file to minimize the risk of exploitation. Avoid using the ld component until the issue is resolved.