CVE-2025-1181

CWE-119 — Buffer Overflow10 documents8 sources
Severity
2.3LOW
EPSS
0.1%
top 69.45%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
GNU Binutils
Timeline
PublishedFeb 11
Latest updateDec 1

Description

A vulnerability classified as critical was found in GNU Binutils 2.43. This vulnerability affects the function _bfd_elf_gc_mark_rsec of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is 931494c9a89558acb36a03a340c01726545eef24. It is recommended to a…

CVSS vector

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Affected Packages3 packages

▶Debianbinutils< 2.45-3
▶CVEListV5gnu/binutils2.43
▶NVDgnu/binutils2.43

🔴Vulnerability Details

4
OSV
binutils vulnerabilities↗2025-04-07
▶
CVEList
GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec memory corruption↗2025-02-11
▶
OSV
CVE-2025-1181: A vulnerability classified as critical was found in GNU Binutils 2↗2025-02-11
▶
GHSA
GHSA-pm93-pg55-r2jm: A vulnerability classified as critical was found in GNU Binutils 2↗2025-02-11
▶

📋Vendor Advisories

5
Ubuntu
GNU binutils vulnerabilities↗2025-12-01
▶
Ubuntu
GNU binutils vulnerabilities↗2025-04-07
▶
Microsoft
GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec memory corruption↗2025-02-11
▶
Red Hat
binutils: GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec memory corruption↗2025-02-11
▶
Debian
CVE-2025-1181: binutils - A vulnerability classified as critical was found in GNU Binutils 2.43. This vuln...↗2025
▶
CVE-2025-1181 (LOW CVSS 2.3) | A vulnerability classified as criti | cvebase.io