Lucene search
K

8 matches found

OSV
OSV
added 2025/08/08 7:15 p.m.5 views

CVE-2025-8736

A vulnerability, which was classified as critical, has been found in GNU cflow up to 1.8. Affected by this issue is the function yylex of the file c.c of the component Lexer. The manipulation leads to buffer overflow. Local access is required to approach this attack. The exploit has been disclose...

5.3CVSS5.6AI score
Exploits0References6
Cvelist
Cvelist
added 2025/08/08 7:2 p.m.10 views

CVE-2025-8736 GNU cflow Lexer c.c yylex buffer overflow

A vulnerability, which was classified as critical, has been found in GNU cflow up to 1.8. Affected by this issue is the function yylex of the file c.c of the component Lexer. The manipulation leads to buffer overflow. Local access is required to approach this attack. The exploit has been disclose...

5.3CVSS0.00071EPSS
Exploits0References6
AlpineLinux
AlpineLinux
added 2025/08/08 7:2 p.m.2 views

CVE-2025-8736

A vulnerability, which was classified as critical, has been found in GNU cflow up to 1.8. Affected by this issue is the function yylex of the file c.c of the component Lexer. The manipulation leads to buffer overflow. Local access is required to approach this attack. The exploit has been disclose...

5.3CVSS7.3AI score0.00071EPSS
Exploits0References6
AlpineLinux
AlpineLinux
added 2025/08/08 6:32 p.m.2 views

CVE-2025-8735

A vulnerability classified as problematic was found in GNU cflow up to 1.8. Affected by this vulnerability is the function yylex of the file c.c of the component Lexer. The manipulation leads to null pointer dereference. An attack has to be approached locally. The exploit has been disclosed to th...

4.8CVSS7.2AI score0.00071EPSS
Exploits0References7
Vulnrichment
Vulnrichment
added 2025/08/08 6:32 p.m.3 views

CVE-2025-8735 GNU cflow Lexer c.c yylex null pointer dereference

A vulnerability classified as problematic was found in GNU cflow up to 1.8. Affected by this vulnerability is the function yylex of the file c.c of the component Lexer. The manipulation leads to null pointer dereference. An attack has to be approached locally. The exploit has been disclosed to th...

4.8CVSS4.3AI score0.00071EPSS
Exploits0References6
OSV
OSV
added 2023/05/18 1:15 p.m.1 views

DEBIAN-CVE-2023-2789

A vulnerability was found in GNU cflow 1.7. It has been rated as problematic. This issue affects the function funcbody/parsevariabledeclaration of the file parser.c. The manipulation leads to denial of service. The exploit has been disclosed to the public and may be used. The identifier VDB-22937...

7.5CVSS4.2AI score0.00211EPSS
Exploits1References1
CNNVD
CNNVD
added 2023/05/18 12:0 a.m.2 views

GNU cflow 安全漏洞

GNU cflow is a flowchart generator from the US GNU community that reads C source files and generates externally referenced flowcharts. A security vulnerability exists in GNU cflow version 1.7, which stems from a problem with the function funcbody/parsevariabledeclaration in parser.c, resulting in...

7.5CVSS5.4AI score0.00211EPSS
Exploits1References5
CNVD
CNVD
added 2019/09/12 12:0 a.m.2 views

GNU cflow Resource Management Error Vulnerability

GNU cflow is a flowchart generator from the GNU Project that reads C source files and generates externally referenced flowcharts. A resource management error vulnerability exists in the 'reference' function of the parser.c file in GNU cflow 1.6 and earlier versions, which arises from mismanagemen...

6.5CVSS6.8AI score0.00516EPSS
Exploits0References1
Rows per page
Query Builder