CVE-2025-1152

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.43

Description A memory leak issue has been found in the xstrdup function of the ld component. This issue can be exploited remotely, but the complexity of an attack is rather high, and the exploitability is difficult. The exploit has been disclosed to the public. The code maintainer has fixed all reported leaks in the binutils master branch.

Recommendations For GNU Binutils version 2.43, it is recommended to apply a patch to fix this issue. As a temporary workaround, consider restricting the use of the xstrdup function in the ld component until a patch is available.