CVE-2023-25584

MEDIUM

GNU Binutils < 2.40 - Out-of-Bounds Read

Title source: rule

An out-of-bounds read flaw was found in the parse_module function in bfd/vms-alpha.c in Binutils.

Core 4

Core References

Third Party Advisory

Mailing List, Patch

Third Party Advisory vdb-entry x_refsource_redhat

Issue Tracking, Patch issue-tracking x_refsource_redhat

CVSS v3 6.3

EPSS 0.0001

EPSS Percentile 2.7%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:H

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

CWE

CWE-125

Status published

Products (1)

gnu/binutils < 2.40

Published Sep 14, 2023

Tracked Since Feb 18, 2026