VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 11, 2025· Updated Apr 25, 2025

GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec memory corruption

CVE-2025-1181

Description

Memory corruption in GNU Binutils 2.43's ld via _bfd_elf_gc_mark_rsec; patch available.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Memory corruption in GNU Binutils 2.43's ld via _bfd_elf_gc_mark_rsec; patch available.

Vulnerability

The vulnerability is a memory corruption issue in the _bfd_elf_gc_mark_rsec function in bfd/elflink.c of GNU Binutils version 2.43. It affects the ld component. The vulnerability is triggered during link-time garbage collection. The patch is identified by commit 931494c9a89558acb36a03a340c01726545eef24. [1]

Exploitation

An attacker can trigger this vulnerability remotely, but the attack complexity is high, making exploitation difficult. The exploit has been disclosed publicly. Crafted object files likely cause memory corruption during the garbage collection process.

Impact

Successful exploitation results in memory corruption, which may lead to arbitrary code execution or denial of service.

Mitigation

Apply the patch identified by commit 931494c9a89558acb36a03a340c01726545eef24. This fix is available from the GNU Binutils repository. Until patched, avoid using the affected version with untrusted input.

References
  1. The GNU Operating System and the Free Software Movement

AI Insight generated on May 25, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.

Affected products

112

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

6

News mentions

0

No linked articles in our index yet.