CVE - CVE-2025-1150

CVE-ID
CVE-2025-1150	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
A vulnerability was found in GNU Binutils 2.43. It has been declared as problematic. This vulnerability affects the function bfd_malloc of the file libbfd.c of the component ld. The manipulation leads to memory leak. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The code maintainer explains: "I'm not going to commit some of the leak fixes I've been working on to the 2.44 branch due to concern that would destabilise ld. All of the reported leaks in this bugzilla have been fixed on binutils master."
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:VDB-295054 \| CTI Indicators (IOB, IOC, TTP, IOA) URL:https://vuldb.com/?ctiid.295054 MISC:VDB-295054 \| GNU Binutils ld libbfd.c bfd_malloc memory leak URL:https://vuldb.com/?id.295054 MISC:https://sourceware.org/bugzilla/attachment.cgi?id=15887 URL:https://sourceware.org/bugzilla/attachment.cgi?id=15887 MISC:https://sourceware.org/bugzilla/show_bug.cgi?id=32576 URL:https://sourceware.org/bugzilla/show_bug.cgi?id=32576 MISC:https://www.gnu.org/ URL:https://www.gnu.org/
Assigning CNA
VulDB
Date Record Created
20250210	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250210)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)