A vulnerability was identified in NASM Netwide Assember 2.17rc0. This issue affects the function assemble_file of the file nasm.c. The manipulation leads to stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.
References
| Link | Resource |
|---|---|
| https://bugzilla.nasm.us/show_bug.cgi?id=3392937 | Exploit Issue Tracking Vendor Advisory |
| https://drive.google.com/file/d/1pEQb6lcdohWV53DzPPU7kaCCNg-qAaau/view?usp=drive_link | Exploit |
| https://vuldb.com/?ctiid.319379 | Permissions Required VDB Entry |
| https://vuldb.com/?id.319379 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.623188 | Exploit Third Party Advisory VDB Entry |
| https://bugzilla.nasm.us/show_bug.cgi?id=3392937 | Exploit Issue Tracking Vendor Advisory |
Configurations
History
15 Sep 2025, 14:57
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://bugzilla.nasm.us/show_bug.cgi?id=3392937 - Exploit, Issue Tracking, Vendor Advisory | |
| References | () https://drive.google.com/file/d/1pEQb6lcdohWV53DzPPU7kaCCNg-qAaau/view?usp=drive_link - Exploit | |
| References | () https://vuldb.com/?ctiid.319379 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.319379 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.623188 - Exploit, Third Party Advisory, VDB Entry | |
| CPE | cpe:2.3:a:nasm:netwide_assembler:2.17:rc0:*:*:*:*:*:* | |
| First Time |
Nasm netwide Assembler
Nasm |
12 Aug 2025, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://bugzilla.nasm.us/show_bug.cgi?id=3392937 - | |
| Summary |
|
11 Aug 2025, 13:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-08-11 13:15
Updated : 2025-09-15 14:57
NVD link : CVE-2025-8845
Mitre link : CVE-2025-8845
CVE.ORG link : CVE-2025-8845
JSON object : View
Products Affected
nasm
- netwide_assembler