We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2025-8846

NASM Netwide Assember parser.c parse_line stack-based overflow



Description

EN DE

A vulnerability has been found in NASM Netwide Assember 2.17rc0. Affected is the function parse_line of the file parser.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.

Es betrifft die Funktion parse_line der Datei parser.c. Mittels Manipulieren mit unbekannten Daten kann eine stack-based buffer overflow-Schwachstelle ausgenutzt werden. Der Angriff hat dabei lokal zu erfolgen. Der Exploit steht zur öffentlichen Verfügung.

Reserved 2025-08-10 | Published 2025-08-11 | Updated 2025-08-11 | Assigner VulDB


MEDIUM: 4.8CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
MEDIUM: 5.3CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
MEDIUM: 5.3CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
4.3AV:L/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR

Problem types

Stack-based Buffer Overflow

Memory Corruption

Product status

2.17rc0
affected

Timeline

2025-08-10:Advisory disclosed
2025-08-10:VulDB entry created
2025-08-10:VulDB entry last update

Credits

xdcao (VulDB User) reporter

References

vuldb.com/?id.319380 (VDB-319380 | NASM Netwide Assember parser.c parse_line stack-based overflow) vdb-entry technical-description

vuldb.com/?ctiid.319380 (VDB-319380 | CTI Indicators (IOB, IOC, IOA)) signature permissions-required

vuldb.com/?submit.623189 (Submit #623189 | nasm NASM version 2.17rc0 compiled on Jul 20 2025 and the newest master (888d9ab) Memory Corruption) third-party-advisory

bugzilla.nasm.us/show_bug.cgi?id=3392938 issue-tracking

drive.google.com/...2fAeJMJ4VGiBQWXpnqfy/view?usp=drive_link exploit

cve.org (CVE-2025-8846)

nvd.nist.gov (CVE-2025-8846)

Download JSON

Share this page
https://cve.threatint.eu/CVE/CVE-2025-8846

Support options

Helpdesk Chat, Email, Knowledgebase