CVE-2025-1371
CVSS 2.0 Score 1.7 of 10 (low)
Details
Published Feb 17, 2025
Updated: Feb 18, 2025
CWE ID 404
CWE ID 476
Summary
CVE-2025-1371 is a newly disclosed vulnerability that affects the handle_dynamic_symtab function in the eu-read component of GNU elfutils 0.192. This issue, classified as problematic, can lead to a null pointer dereference, making it exploitable. The exploit requires local access, and the vulnerability has already been made public. To mitigate this risk, it is strongly recommended to apply the patch identified as b38e562a4c907e08171c76b8b2def8464d5a104a.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- Elfutils
Affected Vendors
- GNU Project