CVE-2024-25260

Summary

elfutils v0.189 was discovered to contain a NULL pointer dereference via the handle_verdef() function at readelf.c.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

CVE Program Container

Additional References

• https://sourceware.org/bugzilla/show_bug.cgi?id=31058
• https://github.com/schsiung/fuzzer_issues/issues/1
• https://sourceware.org/elfutils/

References

• https://sourceware.org/bugzilla/show_bug.cgi?id=31058
• https://github.com/schsiung/fuzzer_issues/issues/1
• https://sourceware.org/elfutils/

• ←Previous
• Next→