CVE-2025-8733

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-8733
A flaw has been found in GNU Bison up to 3.8.2. This affects the function __obstack_vprintf_internal of the file obprintf.c. Executing manipulation can lead to reachable assertion. The attack requires local access. The exploit has been published and may be used. It is still unclear if this vulnerability genuinely exists. The issue could not be reproduced from a GNU Bison 3.8.2 tarball run in a Fedora 42 container.

3.3 /10

CVSS v3 : LOW

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 1.4

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

1.7 /10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:L/AC:L/Au:S/C:N/I:N/A:P

Exploitability : 3.1 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References
Link Resource
https://github.com/akimd/bison/issues/113
https://github.com/akimd/bison/issues/114
https://vuldb.com/?ctiid.319229
https://vuldb.com/?id.319229
https://vuldb.com/?submit.622298
https://vuldb.com/?submit.622299
https://www.gnu.org/
Configurations

No configuration.

History

19 Aug 2025, 05:15

Type Values Removed Values Added
Summary
  • (es) Se encontró una vulnerabilidad en GNU Bison hasta la versión 3.8.2. Se ha clasificado como problemática. Este problema afecta a la función __obstack_vprintf_internal del archivo obprintf.c. La manipulación genera una aserción accesible. Es posible lanzar el ataque contra el host local. Se ha hecho público el exploit y puede que sea utilizado.
Summary (en) A vulnerability was found in GNU Bison up to 3.8.2. It has been rated as problematic. This issue affects the function __obstack_vprintf_internal of the file obprintf.c. The manipulation leads to reachable assertion. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. (en) A flaw has been found in GNU Bison up to 3.8.2. This affects the function __obstack_vprintf_internal of the file obprintf.c. Executing manipulation can lead to reachable assertion. The attack requires local access. The exploit has been published and may be used. It is still unclear if this vulnerability genuinely exists. The issue could not be reproduced from a GNU Bison 3.8.2 tarball run in a Fedora 42 container.

08 Aug 2025, 18:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-08-08 18:15

Updated : 2025-08-19 05:15

NVD link : CVE-2025-8733

Mitre link : CVE-2025-8733

CVE.ORG link : CVE-2025-8733

JSON object : View

Products Affected

No product.

CWE
CWE-617

Reachable Assertion