CVE-2025-8842
CVE-2025-8842 · NASM Netwide Assember preproc.c do_directive use after free
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A vulnerability has been found in NASM Netwide Assember 2.17rc0. Affected by this issue is the function do_directive of the file preproc.c. The manipulation leads to use after free. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.
CVSS 4.8 · Medium · EPSS 0.2%
- Published
- Updated
Stack: system
Affected products and versions
netwide assember
- Versions
- 2.17rc0: Affected
No fix published
nasm Debian:12
- Versions
- 2.16.01-1
- 2.16.03-1
- 3.01-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
nasm Debian:13
- Versions
- 2.16.03-1
- 3.01-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
nasm Debian:14
- Versions
- 2.16.03-1
- 3.01-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
nasm Ubuntu:16.04:LTS
- Versions
- 2.11.06-1really2.11.05-1
- 2.11.08-1
- 2.11.08-1ubuntu0.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
nasm Ubuntu:18.04:LTS
- Versions
- 2.13.01-2
- 2.13.02-0.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
nasm Ubuntu:20.04:LTS
- Versions
- 2.14.02-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
nasm Ubuntu:Pro:22.04:LTS
- Versions
- 2.15.05-1
- 2.15.05-1ubuntu0.1~esm1
- 2.15.05-1ubuntu0.1~esm2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
nasm Ubuntu:Pro:24.04:LTS
- Versions
- 2.16.01-1
- 2.16.01-1build1
- 2.16.01-1ubuntu0.1~esm1
- 2.16.01-1ubuntu0.1~esm2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
nasm Ubuntu:25.10
- Versions
- 2.16.03-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
nasm Ubuntu:26.10
- Versions
- 3.01-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
nasm Ubuntu:26.04:LTS
- Versions
- 2.16.03-1
- 3.01-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published