Homepage

Out-of-Bounds The advisory has been revoked - it doesn't affect any version of package mingw32-binutils  (opens in a new tab)

Threat Intelligence

EPSS
0.71% (54th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-RHEL9-MINGW32BINUTILS-8717416
  • published12 Feb 2025
  • disclosed11 Feb 2025
Report a new vulnerability Found a mistake?

Introduced: 11 Feb 2025

CVE-2025-1181  (opens in a new tab)
CWE-119  (opens in a new tab)

Amendment

The Red Hat security team deemed this advisory irrelevant for RHEL:9.

NVD Description

Note: Versions mentioned in the description apply only to the upstream mingw32-binutils package and not the mingw32-binutils package as distributed by RHEL.

A vulnerability classified as critical was found in GNU Binutils 2.43. This vulnerability affects the function _bfd_elf_gc_mark_rsec of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is 931494c9a89558acb36a03a340c01726545eef24. It is recommended to apply a patch to fix this issue.