CVE-2025-8842: NASM Netwide Assember preproc.c do_directive use after free

Published Aug 11, 2025

Updated

A vulnerability has been found in NASM Netwide Assember 2.17rc0. Affected by this issue is the function dodirective of the file preproc.c. The manipulation leads to use after free. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

nasm Netwide Assembler

nasm Netwide Assembler=2.17-rc0

Event History

Aug 11, 2025

CVE Published

via MITRE·10:32 AM

Data Sourced

via MITRE·10:32 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·11:15 AM

DescriptionSeverityWeaknessAffected Software

Aug 16, 57827

Event

via FIRST·09:30 PM

Frequently Asked Questions

What is the severity of CVE-2025-8842?

CVE-2025-8842 is classified as a high severity vulnerability due to the potential for use after free exploitation.

How do I fix CVE-2025-8842?

To remediate CVE-2025-8842, upgrade to a version of NASM Netwide Assembler that has patched the vulnerability.

What type of vulnerability is CVE-2025-8842?

CVE-2025-8842 is a use after free vulnerability found in the do_directive function of NASM Netwide Assembler.

Can CVE-2025-8842 be exploited remotely?

No, CVE-2025-8842 requires local access to exploit the vulnerability.

What software is affected by CVE-2025-8842?

CVE-2025-8842 affects NASM Netwide Assembler versions including 2.17rc0.