CVE-2025-8842: NASM Netwide Assember preproc.c do_directive use after free

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2025-08-11 · updated 2026-06-17
Weakness: CWE-119

Description

A vulnerability has been found in NASM Netwide Assember 2.17rc0. Affected by this issue is the function do_directive of the file preproc.c. The manipulation leads to use after free. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.

Affected products

NASM Netwide Assember: 2.17-rc0

References

https://bugzilla.nasm.us/show_bug.cgi?id=3392933
https://drive.google.com/file/d/11vEV1vMHXO4BrDGhvWAMm0Qo1woiUwVV/view?usp=drive_link
https://vuldb.com/?ctiid.319376
https://vuldb.com/?id.319376
https://vuldb.com/?submit.623184
https://bugzilla.nasm.us/show_bug.cgi?id=3392933
https://vuldb.com/?submit.623184

Get alerted when CVE-2025-8842 or the next vulnerability affects your stack