CVE-2025-8733

medium

Description

A vulnerability was found in GNU Bison up to 3.8.2. It has been rated as problematic. This issue affects the function __obstack_vprintf_internal of the file obprintf.c. The manipulation leads to reachable assertion. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.

References

https://www.gnu.org/

https://vuldb.com/?submit.622299

https://vuldb.com/?submit.622298

https://vuldb.com/?id.319229

https://vuldb.com/?ctiid.319229

https://github.com/akimd/bison/issues/114

https://github.com/akimd/bison/issues/113

Details

Source: Mitre, NVD

Published: 2025-08-08

Updated: 2025-08-08

Risk Information

CVSS v2

Base Score: 1.7

Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:P

Severity: Low

CVSS v3

Base Score: 3.3

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Severity: Low

CVSS v4

Base Score: 4.8

Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Severity: Medium

EPSS

EPSS: 0.00013