CVE-2025-1150

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.43

Description A memory leak vulnerability has been found in GNU Binutils, affecting the bfd malloc function of the libbfd.c file in the ld component. The manipulation of this vulnerability can lead to a memory leak. The attack can be initiated remotely, and the complexity of the attack is rather high. The exploitation appears to be difficult. The code maintainer has stated that the reported leaks have been fixed in the binutils master branch.

Recommendations For GNU Binutils version 2.43, apply a patch to fix this issue. As a temporary workaround, consider restricting the use of the bfd malloc function in the libbfd.c file until a patch is available.