Description
A vulnerability, which was classified as critical, has been found in GNU cflow up to 1.8. Affected by this issue is the function yylex of the file c.c of the component Lexer. The manipulation leads to buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.
Eine kritische Schwachstelle wurde in GNU cflow bis 1.8 entdeckt. Dies betrifft die Funktion yylex der Datei c.c der Komponente Lexer. Dank Manipulation mit unbekannten Daten kann eine buffer overflow-Schwachstelle ausgenutzt werden. Der Angriff muss lokal passieren. Der Exploit steht zur öffentlichen Verfügung.
Problem types
Product status
1.1
1.2
1.3
1.4
1.5
1.6
1.7
1.8
Timeline
| 2025-08-08: | Advisory disclosed |
| 2025-08-08: | VulDB entry created |
| 2025-08-08: | VulDB entry last update |
References
vuldb.com/?id.319232 (VDB-319232 | GNU cflow Lexer c.c yylex buffer overflow)
vuldb.com/?ctiid.319232 (VDB-319232 | CTI Indicators (IOB, IOC, IOA))
vuldb.com/?submit.622329 (Submit #622329 | GNU cflow cflow cflow (GNU cflow) the newest master (0a19319e282506ff88d19e630380cd5069e893ed ) in cflow.git - GNU cflow Buffer Overflow)
lists.gnu.org/archive/html/bug-cflow/2025-07/msg00001.html
drive.google.com/...LTg3bK-rGBt3kahN9Xse/view?usp=drive_link
www.gnu.org/