CVE-2024-25260

elfutils v0.189 was discovered to contain a NULL pointer dereference via the handle_verdef() function at readelf.c.

CVSS v3.1

4.0 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

EPSS

0.31% chance of exploitation in the next 30 days, 23th percentile

Published

2024-02-20

Updated

2025-04-24

Proof-of-concept exploits (1)

• https://sourceware.org/bugzilla/show_bug.cgi?id=31058

References

• CVE Record
• NVD entry

Related

• CVE-2024-2526
• CVE-2024-25269
• CVE-2024-25255
• CVE-2024-2527
• CVE-2024-25254
• CVE-2024-2528