Description
A vulnerability, which was classified as problematic, has been found in GNU Binutils 2.45. Affected by this issue is the function bfd_elf_set_group_contents of the file bfd/elf.c. The manipulation leads to out-of-bounds write. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The name of the patch is 41461010eb7c79fee7a9d5f6209accdaac66cc6b. It is recommended to apply a patch to fix this issue.
References (10)
Core 10
Core References
Third Party Advisory, VDB Entry vdb-entry
technical-description
https://vuldb.com/?id.316244
Permissions Required, VDB Entry signature
permissions-required
https://vuldb.com/?ctiid.316244
Third Party Advisory, VDB Entry third-party-advisory
https://vuldb.com/?submit.614375
Broken Link issue-tracking
https://sourceware.org/bugzilla/show_bug.cgi?id=33050
Broken Link issue-tracking
https://sourceware.org/bugzilla/show_bug.cgi?id=33050#c2
Broken Link exploit
https://sourceware.org/bugzilla/attachment.cgi?id=16118
Broken Link patch
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=41461010eb7c79fee7a9d5f6209accdaac66cc6b
Product product
https://www.gnu.org/
Vendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-082556.html
Vendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-265688.html
Scores
CVSS v3
5.3
EPSS
0.0006
EPSS Percentile
18.9%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
partial
Details
CWE
CWE-119
CWE-787
Status
published
Products (2)
gnu/binutils
2.45
GNU/Binutils
2.45
Published
Jul 13, 2025
Tracked Since
Feb 18, 2026