Homepage

Out-of-Bounds The advisory has been revoked - it doesn't affect any version of package mingw-binutils  (opens in a new tab)

Threat Intelligence

EPSS
0.59% (48th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-RHEL9-MINGWBINUTILS-8717412
  • published12 Feb 2025
  • disclosed11 Feb 2025
Report a new vulnerability Found a mistake?

Introduced: 11 Feb 2025

CVE-2025-1182  (opens in a new tab)
CWE-119  (opens in a new tab)

Amendment

The Red Hat security team deemed this advisory irrelevant for RHEL:9.

NVD Description

Note: Versions mentioned in the description apply only to the upstream mingw-binutils package and not the mingw-binutils package as distributed by RHEL.

A vulnerability, which was classified as critical, was found in GNU Binutils 2.43. Affected is the function bfd_elf_reloc_symbol_deleted_p of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The patch is identified as b425859021d17adf62f06fb904797cf8642986ad. It is recommended to apply a patch to fix this issue.