PT-2025-6161
CVE-2025-1176
·
Published
2025-02-05
·
Updated
2026-08-25
Description by
CVSS 2.0
5.1
MediumMetricsAV:N/AC:H/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
GNU Binutils version 2.43
Description
A critical issue affects the function
bfd elf gc mark rsec of the file elflink.c of the component ld. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult.Recommendations
Apply a patch to fix this issue, specifically the patch named
f9978defb6fab0bd8583942d97c112b0932ac814. As a temporary workaround, consider restricting access to the vulnerable function bfd elf gc mark rsec until a patch is applied.Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾