Vulnerability Description
A vulnerability has been found in NASM Netwide Assember 2.17rc0. Affected by this issue is the function do_directive of the file preproc.c. The manipulation leads to use after free. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Nasm | Netwide Assembler | 2.17 |
Related Weaknesses (CWE)
References
- https://bugzilla.nasm.us/show_bug.cgi?id=3392933ExploitIssue TrackingVendor Advisory
- https://drive.google.com/file/d/11vEV1vMHXO4BrDGhvWAMm0Qo1woiUwVV/view?usp=driveExploit
- https://vuldb.com/?ctiid.319376Permissions RequiredVDB Entry
- https://vuldb.com/?id.319376Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.623184ExploitThird Party AdvisoryVDB Entry
- https://bugzilla.nasm.us/show_bug.cgi?id=3392933ExploitIssue TrackingVendor Advisory
- https://vuldb.com/?submit.623184ExploitThird Party AdvisoryVDB Entry
FAQ
What is CVE-2025-8842?
CVE-2025-8842 is a vulnerability with a CVSS score of 5.3 (MEDIUM). A vulnerability has been found in NASM Netwide Assember 2.17rc0. Affected by this issue is the function do_directive of the file preproc.c. The manipulation leads to use after free. An attack has to b...
How severe is CVE-2025-8842?
CVE-2025-8842 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-8842?
Check the references section above for vendor advisories and patch information. Affected products include: Nasm Netwide Assembler.