CVE-2025-1179: GNU Binutils ld libbfd.c bfd_putl64 memory corruption
A vulnerability was found in GNU Binutils 2.43. It has been rated as critical. Affected by this issue is the function bfdputl64 of the file bfd/libbfd.c of the component ld. The manipulation leads to memory corruption. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 2.44 is able to address this issue. It is recommended to upgrade the affected component. The code maintainer explains, that "[t]his bug has been fixed at some point between the 2.43 and 2.44 releases".
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-1179?
CVE-2025-1179 has been rated as critical due to its potential for memory corruption.
Which version of GNU Binutils is affected by CVE-2025-1179?
CVE-2025-1179 affects GNU Binutils version 2.43 to 2.44.
How does CVE-2025-1179 expose systems to attacks?
CVE-2025-1179 allows for remote attacks due to memory corruption in the bfd_putl64 function.
What type of attack complexity is associated with CVE-2025-1179?
The complexity of an attack exploiting CVE-2025-1179 is considered to be rather high.
How can I mitigate the risks posed by CVE-2025-1179?
To mitigate risks from CVE-2025-1179, it is recommended to update GNU Binutils to a version beyond 2.44.