How severe is CVE-2025-1352?

This vulnerability has a severity rating of LOW with a CVSS score of 5 out of 10.

What type of vulnerability is CVE-2025-1352?

This is classified as CWE-119, which is a common weakness in software security.

CVE-2025-1352 - LOW Severity | CVSS 5

Vulnerability Description

A vulnerability has been found in GNU elfutils 0.192 and classified as critical. This vulnerability affects the function __libdw_thread_tail in the library libdw_alloc.c of the component eu-readelf. The manipulation of the argument w leads to memory corruption. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is 2636426a091bd6c6f7f02e49ab20d4cdc6bfc753. It is recommended to apply a patch to fix this issue.

Related Vulnerabilities

CVE-2012-0952

MEDIUM

CVSS:5.0(Medium)

A heap buffer overflow was discovered in the device control ioctl in the Linux driver for Nvidia graphics cards, which may allow an attacker to overflow 49 bytes. This issue was fixed in version 295.5...

CWE-1192012

CVE-2016-0869

MEDIUM

CVSS:5.0(Medium)

Heap-based buffer overflow in MICROSYS PROMOTIC before 8.3.11 allows remote authenticated users to cause a denial of service via a malformed HTML document.

CWE-1192016

CVE-2016-4528

MEDIUM

CVSS:5.0(Medium)

Buffer overflow in Advantech WebAccess before 8.1_20160519 allows local users to cause a denial of service via a crafted DLL file.

CWE-1192016

CVE-2017-6435

MEDIUM

CVSS:5.0(Medium)

The parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory corruption) via a crafted plist file.

CWE-1192017

CVE-2025-1176

LOW

CVSS:5.0(Medium)

A vulnerability was found in GNU Binutils 2.43 and classified as critical. This issue affects the function _bfd_elf_gc_mark_rsec of the file elflink.c of the component ld. The manipulation leads to he...

CWE-1192025

CVE-2025-1181

LOW

CVSS:5.0(Medium)

A vulnerability classified as critical was found in GNU Binutils 2.43. This vulnerability affects the function _bfd_elf_gc_mark_rsec of the file bfd/elflink.c of the component ld. The manipulation lea...

CWE-1192025