Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:binutils:2.43:*:*:*:*:*:*:*

part: a version: 2.43 update: *

VendorGnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9)
ProductBinutils (bdfd61c2-da72-5ce9-819e-45ee45378259)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/binutils purl2cpe 2026-06-01 10:11:54.199223
pkg:deb/ubuntu/binutils purl2cpe 2026-06-01 10:11:54.199225
pkg:github/bminor/binutils-gdb purl2cpe 2026-06-01 10:11:54.199226
pkg:redox-os/redox-os/binutils-gdb purl2cpe 2026-06-01 10:11:54.199228
pkg:rpm/fedora/binutils purl2cpe 2026-06-01 10:11:54.199229
pkg:rpm/opensuse/binutils purl2cpe 2026-06-01 10:11:54.199230
pkg:sourceware/binutils-gdb purl2cpe 2026-06-01 10:11:54.199232

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-3198 vulnerable 2026-06-08 07:23:08.418399 GNU Binutils objdump bucomm.c display_info memory leak
LOW (3.3)
A vulnerability has been found in GNU Binutils 2.43/2.44 and classified as problematic. Affected by this vulnerability is the function display_info of the file binutils/bucomm.c of the component objdump. The manipulation leads to memory leak. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The patch is named ba6ad3a18cb26b79e0e3b84c39f707535bbc344d. It is recommended to apply a patch to fix this issue.
Published: 2025-04-04T01:31:08.985Z
Updated: 2026-07-14T12:39:00.290Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1182 vulnerable 2026-06-08 07:06:37.108042 GNU Binutils ld elflink.c bfd_elf_reloc_symbol_deleted_p memory corruption
MEDIUM (5)
A vulnerability, which was classified as critical, was found in GNU Binutils 2.43. Affected is the function bfd_elf_reloc_symbol_deleted_p of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The patch is identified as b425859021d17adf62f06fb904797cf8642986ad. It is recommended to apply a patch to fix this issue.
Published: 2025-02-11T08:31:08.272Z
Updated: 2025-02-11T14:47:09.739Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1181 vulnerable 2026-06-08 07:06:37.103459 GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec memory corruption
MEDIUM (5)
A vulnerability classified as critical was found in GNU Binutils 2.43. This vulnerability affects the function _bfd_elf_gc_mark_rsec of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is 931494c9a89558acb36a03a340c01726545eef24. It is recommended to apply a patch to fix this issue.
Published: 2025-02-11T08:00:11.337Z
Updated: 2025-04-25T23:02:58.994Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1180 vulnerable 2026-06-08 07:06:37.102841 GNU Binutils ld elf-eh-frame.c _bfd_elf_write_section_eh_frame memory corruption
LOW (3.1)
A vulnerability classified as problematic has been found in GNU Binutils 2.43. This affects the function _bfd_elf_write_section_eh_frame of the file bfd/elf-eh-frame.c of the component ld. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue.
Published: 2025-02-11T07:31:06.853Z
Updated: 2025-02-11T14:55:02.649Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1179 vulnerable 2026-06-08 07:06:37.102218 GNU Binutils ld libbfd.c bfd_putl64 memory corruption
MEDIUM (5)
A vulnerability was found in GNU Binutils 2.43. It has been rated as critical. Affected by this issue is the function bfd_putl64 of the file bfd/libbfd.c of the component ld. The manipulation leads to memory corruption. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 2.44 is able to address this issue. It is recommended to upgrade the affected component. The code maintainer explains, that "[t]his bug has been fixed at some point between the 2.43 and 2.44 releases".
Published: 2025-02-11T07:00:10.602Z
Updated: 2025-02-11T15:15:23.220Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1178 vulnerable 2026-06-08 07:06:37.098014 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1176 vulnerable 2026-06-08 07:06:37.094261 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1153 vulnerable 2026-06-08 07:06:37.042798 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1152 vulnerable 2026-06-08 07:06:37.042271 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1151 vulnerable 2026-06-08 07:06:37.041856 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1150 vulnerable 2026-06-08 07:06:37.041350 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1149 vulnerable 2026-06-08 07:06:37.040946 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1148 vulnerable 2026-06-08 07:06:37.040365 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1147 vulnerable 2026-06-08 07:06:37.039838 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.