CVE-2025-1178
MEDIUMGNU Binutils 2.43 - Memory Corruption in bfd_putl64 Function
Title source: llmDescription
A vulnerability was found in GNU Binutils 2.43. It has been declared as problematic. Affected by this vulnerability is the function bfd_putl64 of the file libbfd.c of the component ld. The manipulation leads to memory corruption. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The identifier of the patch is 75086e9de1707281172cc77f178e7949a4414ed0. It is recommended to apply a patch to fix this issue.
References (8)
Core 8
Core References
Third Party Advisory
https://security.netapp.com/advisory/ntap-20250411-0008/
Third Party Advisory, VDB Entry vdb-entry
technical-description
https://vuldb.com/?id.295081
Permissions Required, VDB Entry signature
permissions-required
https://vuldb.com/?ctiid.295081
Exploit, VDB Entry third-party-advisory
https://vuldb.com/?submit.495369
Broken Link issue-tracking
https://sourceware.org/bugzilla/show_bug.cgi?id=32638
Broken Link exploit
https://sourceware.org/bugzilla/attachment.cgi?id=15914
Broken Link patch
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=75086e9de1707281172cc77f178e7949a4414ed0
Product product
https://www.gnu.org/
Scores
CVSS v3
5.6
EPSS
0.0010
EPSS Percentile
27.7%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
partial
Details
CWE
CWE-119
Status
published
Products (3)
gnu/binutils
2.43
netapp/active_iq_unified_manager
netapp/ontap_select_deploy_administration_utility
Published
Feb 11, 2025
Tracked Since
Feb 18, 2026