CVE-2025-8844: NASM Netwide Assember preproc.c parse_smacro_template null pointer dereference

Published Aug 11, 2025

Updated

A vulnerability was determined in NASM Netwide Assember 2.17rc0. This vulnerability affects the function parsesmacrotemplate of the file preproc.c. The manipulation leads to null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

nasm Netwide Assembler

nasm Netwide Assembler=2.17-rc0

Event History

Aug 11, 2025

CVE Published

via MITRE·11:32 AM

Data Sourced

via MITRE·11:32 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·12:15 PM

DescriptionSeverityWeaknessAffected Software

Mar 29, 57915

Event

via FIRST·09:11 AM

Frequently Asked Questions

What is the severity of CVE-2025-8844?

CVE-2025-8844 is classified as a high severity vulnerability due to the potential for a local attacker to cause a null pointer dereference.

How does CVE-2025-8844 affect NASM Netwide Assembler?

CVE-2025-8844 affects the parse_smacro_template function within preproc.c, leading to an application crash.

Can CVE-2025-8844 be exploited remotely?

No, CVE-2025-8844 requires local access to exploit the vulnerability.

What versions of NASM are affected by CVE-2025-8844?

CVE-2025-8844 affects NASM Netwide Assembler version 2.17rc0.

How can I mitigate CVE-2025-8844?

To mitigate CVE-2025-8844, it is recommended to update to a patched version of NASM that addresses the null pointer dereference issue.