CVE-2025-1176

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.43

Description A critical issue affects the function bfd elf gc mark rsec of the file elflink.c of the component ld. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult.

Recommendations Apply a patch to fix this issue, specifically the patch named f9978defb6fab0bd8583942d97c112b0932ac814. As a temporary workaround, consider restricting access to the vulnerable function bfd elf gc mark rsec until a patch is applied.