CVE-2025-1365

Name of the Vulnerable Software and Affected Versions: GNU elfutils version 0.192

Description: A critical issue was found in GNU elfutils. This affects the process symtab function of the readelf.c file in the eu-readelf component. The manipulation of the D/a argument leads to a buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.

Recommendations: To fix this issue, apply a patch to GNU elfutils version 0.192. As a temporary workaround, consider restricting access to the eu-readelf component until a patch is available. Avoid using the D/a argument in the affected readelf.c file until the issue is resolved.