CVE-2024-25260: Elfutils Project Elfutils

Medium severity, CVSS 4.0. EPSS: 0.3% chance of exploitation in the next 30 days.

elfutils v0.189 was discovered to contain a NULL pointer dereference via the handle_verdef() function at readelf.c.

Affected products

• Elfutils Project Elfutils: version 0.189 only

Published 2024-02-20. Last modified 2026-06-17.