{"id":"CVE-2025-8735","state":"PUBLISHED","title":"GNU cflow Lexer c.c yylex null pointer dereference","description":"A vulnerability classified as problematic was found in GNU cflow up to 1.8. Affected by this vulnerability is the function yylex of the file c.c of the component Lexer. The manipulation leads to null pointer dereference. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.","publishedAt":"2025-08-08T18:32:06.777Z","updatedAt":"2025-10-28T00:43:32.142Z","severity":{"score":4.8,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P","source":"VulDB"},"assigner":"VulDB","products":["GNU cflow"],"affected":[{"vendor":"GNU","product":"cflow","versions":[{"version":"1.0","status":"affected"},{"version":"1.1","status":"affected"},{"version":"1.2","status":"affected"},{"version":"1.3","status":"affected"},{"version":"1.4","status":"affected"},{"version":"1.5","status":"affected"},{"version":"1.6","status":"affected"},{"version":"1.7","status":"affected"},{"version":"1.8","status":"affected"}],"modules":["Lexer"]}],"references":["https://vuldb.com/?id.319231","https://vuldb.com/?ctiid.319231","https://vuldb.com/?submit.622328","https://lists.gnu.org/archive/html/bug-cflow/2025-07/msg00000.html","https://drive.google.com/file/d/1Q_rDQSEl3cBu6SUbfqr9pV9cHgvKcXFI/view?usp=drive_link","https://www.gnu.org/","https://www.openwall.com/lists/oss-security/2025/10/27/12"],"weaknesses":["CWE-476","CWE-404"],"ingestedAt":"2026-10-29T20:10:04.440Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/8xxx/CVE-2025-8735.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-8735","state":"PUBLISHED","datePublished":"2025-08-08T18:32:06.777Z","dateUpdated":"2025-10-28T00:43:32.142Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2025-08-08T08:12:19.373Z"},"containers":{"cna":{"title":"GNU cflow Lexer c.c yylex null pointer dereference","descriptions":[{"lang":"en","value":"A vulnerability classified as problematic was found in GNU cflow up to 1.8. Affected by this vulnerability is the function yylex of the file c.c of the component Lexer. The manipulation leads to null pointer dereference. An attack has to be approached locally. The exploit has been disclosed to the public and may be used."},{"lang":"de","value":"In GNU cflow bis 1.8 wurde eine problematische Schwachstelle entdeckt. Das betrifft die Funktion yylex der Datei c.c der Komponente Lexer. Dank der Manipulation mit unbekannten Daten kann eine null pointer dereference-Schwachstelle ausgenutzt werden. Der Angriff muss lokal angegangen werden. Der Exploit steht zur öffentlichen Verfügung."}],"affected":[{"vendor":"GNU","product":"cflow","versions":[{"version":"1.0","status":"affected"},{"version":"1.1","status":"affected"},{"version":"1.2","status":"affected"},{"version":"1.3","status":"affected"},{"version":"1.4","status":"affected"},{"version":"1.5","status":"affected"},{"version":"1.6","status":"affected"},{"version":"1.7","status":"affected"},{"version":"1.8","status":"affected"}],"modules":["Lexer"]}],"references":[{"url":"https://vuldb.com/?id.319231","name":"VDB-319231 | GNU cflow Lexer c.c yylex null pointer dereference","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/?ctiid.319231","name":"VDB-319231 | CTI Indicators (IOB, IOC, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/?submit.622328","name":"Submit #622328 | GNU cflow  cflow  cflow (GNU cflow)  the newest master (0a19319e282506ff88d19e630380cd5069e893ed ) in cflow.git - GNU cflow Null Pointer Dereference","tags":["third-party-advisory"]},{"url":"https://lists.gnu.org/archive/html/bug-cflow/2025-07/msg00000.html","tags":["related"]},{"url":"https://drive.google.com/file/d/1Q_rDQSEl3cBu6SUbfqr9pV9cHgvKcXFI/view?usp=drive_link","tags":["exploit"]},{"url":"https://www.gnu.org/","tags":["product"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":4.8,"vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":3.3,"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R","baseSeverity":"LOW"}},{"cvssV3_0":{"version":"3.0","baseScore":3.3,"vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R","baseSeverity":"LOW"}},{"cvssV2_0":{"version":"2.0","baseScore":1.7,"vectorString":"AV:L/AC:L/Au:S/C:N/I:N/A:P/E:POC/RL:ND/RC:UR"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-476","type":"CWE","lang":"en","description":"NULL Pointer Dereference"}]},{"descriptions":[{"cweId":"CWE-404","type":"CWE","lang":"en","description":"Denial of Service"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2025-08-08T18:32:06.777Z"},"timeline":[{"time":"2025-08-08T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2025-08-08T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2025-08-08T10:17:27.000Z","lang":"en","value":"VulDB entry last update"}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-08-08T18:45:08.773391Z","id":"CVE-2025-8735","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-08-08T18:45:30.466Z"}},{"title":"CVE Program Container","references":[{"url":"https://www.openwall.com/lists/oss-security/2025/10/27/12"}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2025-10-28T00:43:32.142Z"},"x_generator":{"engine":"ADPogram 0.0.1"}}]}}}