CVE-2025-8842
Last modified
CVE-2025-8842 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. A vulnerability has been found in NASM Netwide Assember 2.17rc0. Affected by this issue is the function do_directive of the file preproc.c. EPSS estimates a 0.20% chance of exploitation in the next 30 days.
Description
A vulnerability has been found in NASM Netwide Assember 2.17rc0. Affected by this issue is the function do_directive of the file preproc.c. The manipulation leads to use after free. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Nasm | Netwide Assembler | 2.17 | Rc0 |
References
- https://bugzilla.nasm.us/show_bug.cgi?id=3392933Exploit, Issue Tracking, Vendor Advisory
- https://vuldb.com/?ctiid.319376Permissions Required, VDB Entry
- https://vuldb.com/?id.319376Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.623184Exploit, Third Party Advisory, VDB Entry
- https://bugzilla.nasm.us/show_bug.cgi?id=3392933Exploit, Issue Tracking, Vendor Advisory
- https://vuldb.com/?submit.623184Exploit, Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-8842?
How severe is CVE-2025-8842?
How do I fix CVE-2025-8842?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-8836A vulnerability was determined in JasPer up to 4.2.5. Affect…3.3
- CVE-2025-8837A vulnerability was identified in JasPer up to 4.2.5. This a…7.8
- CVE-2025-8838A vulnerability has been found in WinterChenS my-site up to …9.8
- CVE-2025-8839A vulnerability was found in jshERP up to 3.5. This issue af…8.8
- CVE-2025-8840A vulnerability was determined in jshERP up to 3.5. Affected…5.4
- CVE-2025-8841A vulnerability was identified in zlt2000 microservices-plat…6.1
- CVE-2025-8843A vulnerability was found in NASM Netwide Assember 2.17rc0. …7.8
- CVE-2025-8844A vulnerability was determined in NASM Netwide Assember 2.17…5.5
- CVE-2025-8845A vulnerability was identified in NASM Netwide Assember 2.17…7.8
- CVE-2025-8846A vulnerability has been found in NASM Netwide Assember 2.17…7.8
- CVE-2025-8847A vulnerability was found in yangzongzhuan RuoYi up to 4.8.1…5.4
- CVE-2025-8848A vulnerability in danny-avila/librechat version 0.7.9 allow…5.4
Are you affected by CVE-2025-8842?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST