GNU Binutils Heap-Based Buffer Overflow Vulnerability

A critical heap-based buffer overflow vulnerability has been identified in GNU Binutils version 2.43. This issue arises in the linker component (ld), specifically within the '_bfd_elf_gc_mark_rsec' function of 'elflink.c'. The vulnerability can be exploited remotely, although the attack's complexity is high and exploitation is known to be difficult.

Impact

Exploitation of this vulnerability could result in a heap-based buffer overflow, a serious memory corruption issue that can lead to arbitrary code execution or other malicious outcomes.

Remediation

Users are advised to apply the patch associated with this vulnerability, which is available in the NetApp advisory NTAP-20250411-0007.