272 matches found
EUVD-2025-45461
Malicious code in rivalbisonz3n npm...
EUVD-2020-6307
Malware in sbrugna...
EUVD-2020-16975
Malware in sbrugna...
EUVD-2025-24010
Malicious code in bioql PyPI...
EUVD-2025-24007
Malicious code in bioql PyPI...
GNU Bison before 3.5.4 allows attackers to cause a denial of service (application crash). NOTE: there is a risk only if Bison is used with untrusted input, and an observed bug happens to cause unsafe behavior with a specific compiler/architecture. The bug reports were intended to show that a crash may occur in Bison itself, not that a crash may occur in code that is generated by Bison.
...
The vulnerability of the GNU Bison parser generator lies in the use of the `assert()` function or similar operators, which allow a violator to trigger a failure in the service process.
The vulnerability of the GNU Bison parser generator is related to the use of the assert function or similar operators. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the GNU Bison parser generator lies in improper restrictions on operations within the buffer memory, which allows a malicious actor to trigger a service failure.
The vulnerability of the GNU Bison parser generator is related to incorrect restrictions on operations within the buffer memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
GNU Bison scan-code.c code_free double free
...
GNU Bison obprintf.c __obstack_vprintf_internal assertion
...
ROS-20250829-05
The vulnerability of the GNU Bison universal parser generator is related to manipulation of the function obstackvprintfinternal of the obprintf.c. file. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
ROS-20250828-02
A vulnerability in the GNU Bison universal parser generator is related to double memory freeing. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
Linux Distros Unpatched Vulnerability : CVE-2020-24240
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Bison before 3.7.1 has a use-after-free in obstackfree in lib/obstack.c called from gramlex when a '\0' byte is encountered. NOTE: there is a risk only if...
Linux Distros Unpatched Vulnerability : CVE-2025-8733
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw has been found in GNU Bison up to 3.8.2. This affects the function obstackvprintfinternal of the file obprintf.c. Executing manipulation can lead to...
Linux Distros Unpatched Vulnerability : CVE-2025-8734
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been found in GNU Bison up to 3.8.2. This impacts the function codefree of the file src/scan-code.c. The manipulation leads to double free. ...
Malicious code in bison-7dawf-siudn-yarn-project (npm)
The package bison-7dawf-siudn-yarn-project was found to contain malicious code...
Malicious code in bison-7dncg-jct90-crescent-project (npm)
The package bison-7dncg-jct90-crescent-project was found to contain malicious code...
Malicious code in echo-ie1q3-6r82o-bison-project (npm)
The package echo-ie1q3-6r82o-bison-project was found to contain malicious code...