CVE-2025-1153lowCWE-119

CVE-2025-1153: fallo de gravedad baja en GNU Binutils

GNU Binutils format.c bfd_set_format memory corruption

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Binutils+ Monitorear binutils

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

8Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 2.3epss 1.4%
A vulnerability classified as problematic was found in GNU Binutils 2.43/2.44. Affected by this vulnerability is the function bfd_set_format of the file format.c. The manipulation leads to memory corruption. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. Upgrading to version 2.45 is able to address this issue. The identifier of the patch is 8d97c1a53f3dc9fd8e1ccdb039b8a33d50133150. It is recommended to upgrade the affected component.
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Productos afectados
GNU · Binutils
CVEs relacionadas — GNU Binutils

En el mismo producto, de las más peligrosas a las menos.

CVE-2025-1178MEDIUMGNU Binutils ld libbfd.c bfd_putl64 memory corruptionEPSS 0.8%CVE-2025-0840MEDIUMGNU Binutils objdump.c disassemble_bytes stack-based overflowEPSS 0.8%CVE-2025-1181LOWGNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec memory corruptionEPSS 0.7%CVE-2025-1180LOWGNU Binutils ld elf-eh-frame.c _bfd_elf_write_section_eh_frame memory corruptionEPSS 0.7%CVE-2025-1176LOWGNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec heap-based overflowEPSS 0.7%CVE-2025-1147LOWGNU Binutils nm nm.c internal_strlen buffer overflowEPSS 0.7%