A vulnerability has been found in GNU Bison up to 3.8.2. This impacts the function code_free of the file src/scan-code.c. The manipulation leads to double free. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The actual existence of this vulnerability is currently in question. The issue could not be reproduced from a GNU Bison 3.8.2 tarball run in a Fedora 42 container.
CVSS
No CVSS.
References
Configurations
No configuration.
History
19 Aug 2025, 05:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | A vulnerability has been found in GNU Bison up to 3.8.2. This impacts the function code_free of the file src/scan-code.c. The manipulation leads to double free. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The actual existence of this vulnerability is currently in question. The issue could not be reproduced from a GNU Bison 3.8.2 tarball run in a Fedora 42 container. | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : unknown |
| CWE | CWE-119 |
08 Aug 2025, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-08-08 18:15
Updated : 2025-08-19 05:15
NVD link : CVE-2025-8734
Mitre link : CVE-2025-8734
JSON object : View
Products Affected
No product.
CWE
No CWE.