#VU106003 Buffer overflow in elfutils - CVE-2025-1372

Vulnerability identifier: #VU106003

Vulnerability risk: Medium

CVSSv4.0: 4.8 [CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2025-1372

CWE-ID: CWE-119

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
elfutils
Server applications / File servers (FTP/HTTP)

Vendor: Sourceware

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error within the dump_data_section() and print_string_section() functions in readelf.c. A remote attacker can trick the victim into passing specially crafted file to the application, trigger memory corruption and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation
Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

Vulnerable software versions

elfutils: 0.120 - 0.192

---

External links
https://sourceware.org/bugzilla/attachment.cgi?id=15927
https://sourceware.org/bugzilla/show_bug.cgi?id=32656
https://sourceware.org/bugzilla/show_bug.cgi?id=32657
https://vuldb.com/?ctiid.295981
https://vuldb.com/?id.295981
https://vuldb.com/?submit.496485

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.