CVE-2025-1176

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-1176
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-1176.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-1176
Downstream
Related
Published
2025-02-11T05:31:08.015Z
Modified
2026-07-24T04:00:44.855411511Z
Severity
  • 2.3 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N CVSS Calculator
Summary
GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec heap-based overflow
Details

A vulnerability was found in GNU Binutils 2.43 and classified as critical. This issue affects the function bfdelfgcmark_rsec of the file elflink.c of the component ld. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The patch is named f9978defb6fab0bd8583942d97c112b0932ac814. It is recommended to apply a patch to fix this issue.

Database specific 
{
    "cwe_ids": [
        "CWE-119",
        "CWE-122"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/1xxx/CVE-2025-1176.json",
    "cna_assigner": "VulDB"
}
References

Affected packages

Git / sourceware.org/git/binutils-gdb.git

Affected ranges

Type
GIT
Repo
https://sourceware.org/git/binutils-gdb.git
Events
Introduced
57f3676f3e5266829a91880d61143ab9ecd617bd
Last affected
57f3676f3e5266829a91880d61143ab9ecd617bd
Database specific 
{
    "cpe": "cpe:2.3:a:gnu:binutils:2.43:*:*:*:*:*:*:*",
    "source": [
        "AFFECTED_FIELD",
        "CPE_STRING"
    ],
    "extracted_events": [
        {
            "introduced": "2.43"
        },
        {
            "last_affected": "2.43"
        }
    ]
}

Affected versions

2.*
2.43
Other
binutils-2_43

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-1176.json"