Logo
›
›vulnerability›CVE-2025-1147
Name
CVE-2025-1147
Source
NVD ( link)Debian ( link)
Description
A vulnerability has been found in GNU Binutils 2.43 and classified as problematic. Affected by this vulnerability is the function __sanitizer::internal_strlen of the file binutils/nm.c of the component nm. The manipulation of the argument const leads to buffer overflow. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used.
CWEs
CWE-119 CWE-120
Published Date
Updated Date
Workaround
-
Advisories
https://sourceware.org/bugzilla/attachment.cgi?id=15881Broken Link
https://sourceware.org/bugzilla/show_bug.cgi?id=32556Exploit
https://vuldb.com/?ctiid.295051Permissions Required
https://vuldb.com/?id.295051VDB Entry
https://vuldb.com/?submit.485254Exploit
https://www.gnu.org/Product

Analysis#

Affected Component
Analysis
binutils
Patched

Vulnerability Ratings#

2.3
CVSSv4
3.1
CVSSv31
5.3
CVSSv31
2.6
CVSSv2
NaN
other

Others affected components#

Name
Project
Project Version
Version
Status
binutils
buildroot
2025.02.x
2.43.1
Not Affected
binutils
buildroot
master
2.46.1
Not Affected
binutils
openwrt
master
2.46.0-r1
Not Affected
binutils
openwrt
openwrt-25.12
2.45.1-r1
Not Affected
binutils
yocto
kirkstone
2.38
Not Affected
binutils
yocto
master
2.47
Not Affected

Resolved with patches#

binutils (yocto:scarthgap)

#
Title
Author
Resolve
1
nm: fix treating an ifunc symbol as a stab if
Dmitry Klochkov <dmitry.klochkov@bell-sw.com>
CVE-2025-1147