CVE-2025-1147

Summary

CVE-2025-1147 is a newly discovered vulnerability affecting the GNU Binutils 2.43 version. Specifically, the issue lies within the function __sanitizer::internal_strlen in the nm.c component of the nm tool. The flaw is triggered by a manipulated argument, resulting in a buffer overflow. This vulnerability can be exploited remotely, but the attack's complexity and successful exploitation difficulty are relatively high. Unfortunately, an exploit for this vulnerability has already been made public.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.