CVE-2025-8736

Description

A vulnerability, which was classified as critical, has been found in GNU cflow up to 1.8. Affected by this issue is the function yylex of the file c.c of the component Lexer. The manipulation leads to buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.

References

https://www.gnu.org/

https://vuldb.com/?submit.622329

https://vuldb.com/?id.319232

https://vuldb.com/?ctiid.319232

https://lists.gnu.org/archive/html/bug-cflow/2025-07/msg00001.html

https://drive.google.com/file/d/17lkJ5bSiQZoXLTg3bK-rGBt3kahN9Xse/view?usp=drive_link

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

CVSS v4

EPSS