Remote Mem Corruption via bfd_elf_reloc in GNU Binutils 2.43
CVE-2025-1182 Published on February 11, 2025
GNU Binutils ld elflink.c bfd_elf_reloc_symbol_deleted_p memory corruption
A vulnerability, which was classified as critical, was found in GNU Binutils 2.43. Affected is the function bfd_elf_reloc_symbol_deleted_p of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The patch is identified as b425859021d17adf62f06fb904797cf8642986ad. It is recommended to apply a patch to fix this issue.
Timeline
Advisory disclosed
VulDB entry created
VulDB entry last update
Weakness Type
What is a Buffer Overflow Vulnerability?
The software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.
CVE-2025-1182 has been classified to as a Buffer Overflow vulnerability or weakness.
Products Associated with CVE-2025-1182
stack.watch emails you whenever new vulnerabilities are published in Canonical Ubuntu Linux or GNU Binutils. Just hit a watch button to start following.
Affected Versions
GNU Binutils Version 2.43 is affected by CVE-2025-1182Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.