ByteOS Network

NVD Vulnerability Details :

CVE-2025-8733

Awaiting Analysis

Source-cna@vuldb.com

Published At-08 Aug, 2025 | 18:15

Updated At-19 Aug, 2025 | 05:15

A flaw has been found in GNU Bison up to 3.8.2. This affects the function __obstack_vprintf_internal of the file obprintf.c. Executing manipulation can lead to reachable assertion. The attack requires local access. The exploit has been published and may be used. It is still unclear if this vulnerability genuinely exists. The issue could not be reproduced from a GNU Bison 3.8.2 tarball run in a Fedora 42 container.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	4.0	4.8	MEDIUM	CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Secondary	3.1	3.3	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Secondary	2.0	1.7	LOW	AV:L/AC:L/Au:S/C:N/I:N/A:P

Weaknesses

CWE ID	Type	Source
CWE-617	Secondary	cna@vuldb.com

References

Hyperlink	Source	Resource
https://github.com/akimd/bison/issues/113	cna@vuldb.com	N/A
https://github.com/akimd/bison/issues/114	cna@vuldb.com	N/A
https://vuldb.com/?ctiid.319229	cna@vuldb.com	N/A
https://vuldb.com/?id.319229	cna@vuldb.com	N/A
https://vuldb.com/?submit.622298	cna@vuldb.com	N/A
https://vuldb.com/?submit.622299	cna@vuldb.com	N/A
https://www.gnu.org/	cna@vuldb.com	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History