CVE-2025-1151

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.43

Description A memory leak issue affects the xmemdup function of the ld component in the xmemdup.c file. This issue can be exploited remotely, but the complexity of an attack is rather high, and the exploitation is known to be difficult. The code maintainer has fixed all reported leaks in the binutils master branch.

Recommendations For GNU Binutils version 2.43, it is recommended to apply a patch to fix this issue. As a temporary workaround, consider restricting the use of the xmemdup function until a patch is available.