CNNVD-202508-925 Information

CNNVD ID

CNNVD-202508-925

CVE-2025-8843

  • CNNVD Published: 2025-08-11

Description (Chinese)

NASM Netwide Assember是NASM团队的一款汇编器和反汇编器。 NASM Netwide Assember 2.17rc0版本存在安全漏洞,该漏洞源于文件outmacho.c中函数macho_no_dead_strip存在堆缓冲区溢出。

Description (English)

NASM Netwide Assembly is a compiler and a counter compiler for the NASM team. There is a security loophole in NASM Netwide Assembly 2.17 rc0, which stems from the proliferation of buffers in documentoutmacho.c, function macho no head strip.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

NASM

Published

2025-08-11

Last Modified

2026-02-24

References

https://vuldb.com/?submit.623185 https://vuldb.com/?ctiid.319377 https://drive.google.com/file/d/1JRHWdjW6FGHDV0CMJe8VinmCQ4vP9ZpR/view?usp=drive_link https://vuldb.com/?submit.623186 https://vuldb.com/?id.319377 https://bugzilla.nasm.us/show_bug.cgi?id=3392934 https://access.redhat.com/security/cve/cve-2025-8843

Share on: