CVE-2025-1352: Memory Corruption in GNU elfutils
A vulnerability has been found in GNU elfutils 0.192 and classified as critical. This vulnerability affects the function __libdw_thread_tail in the library libdw_alloc.c of the component eu-readelf. The manipulation of the argument w leads to memory corruption. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is 2636426a091bd6c6f7f02e49ab20d4cdc6bfc753. It is recommended to apply a patch to fix this issue.
AI Analysis
Technical Summary
This vulnerability affects GNU elfutils 0.192 in the eu-readelf component's __libdw_thread_tail function, where improper handling of the argument w can cause memory corruption. The vulnerability is remotely exploitable but requires high complexity and user interaction, with limited impact on confidentiality, integrity, and availability as reflected by the CVSS 4.0 vector. A patch exists (commit 2636426a091bd6c6f7f02e49ab20d4cdc6bfc753) to fix the issue, though no official remediation level is specified in the provided data.
Potential Impact
Successful exploitation could lead to memory corruption, which might affect the stability or behavior of the affected component. However, the low CVSS score and high attack complexity indicate limited practical impact. There are no known exploits in the wild at this time.
Mitigation Recommendations
Apply the patch identified by commit 2636426a091bd6c6f7f02e49ab20d4cdc6bfc753 to remediate this vulnerability. Patch status is not explicitly confirmed in the vendor advisory content, so verify the availability and applicability of this patch from the official GNU elfutils sources. No other specific mitigations are indicated.
CVE-2025-1352: Memory Corruption in GNU elfutils
Description
A vulnerability has been found in GNU elfutils 0.192 and classified as critical. This vulnerability affects the function __libdw_thread_tail in the library libdw_alloc.c of the component eu-readelf. The manipulation of the argument w leads to memory corruption. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is 2636426a091bd6c6f7f02e49ab20d4cdc6bfc753. It is recommended to apply a patch to fix this issue.
CVSS v4.0
Score 2.3low
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability affects GNU elfutils 0.192 in the eu-readelf component's __libdw_thread_tail function, where improper handling of the argument w can cause memory corruption. The vulnerability is remotely exploitable but requires high complexity and user interaction, with limited impact on confidentiality, integrity, and availability as reflected by the CVSS 4.0 vector. A patch exists (commit 2636426a091bd6c6f7f02e49ab20d4cdc6bfc753) to fix the issue, though no official remediation level is specified in the provided data.
Potential Impact
Successful exploitation could lead to memory corruption, which might affect the stability or behavior of the affected component. However, the low CVSS score and high attack complexity indicate limited practical impact. There are no known exploits in the wild at this time.
Mitigation Recommendations
Apply the patch identified by commit 2636426a091bd6c6f7f02e49ab20d4cdc6bfc753 to remediate this vulnerability. Patch status is not explicitly confirmed in the vendor advisory content, so verify the availability and applicability of this patch from the official GNU elfutils sources. No other specific mitigations are indicated.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2025-02-15T15:17:01.106Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6a1ee64fe29bf47b50d3a8d0
Added to database: 06/02/2026, 14:18:55 UTC
Last enriched: 06/02/2026, 14:35:44 UTC
Last updated: 09/10/2026, 19:36:49 UTC
Views: 63
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.