CVE-2025-8735
Severity
4.8MEDIUM
EPSS
0.0%
top 94.86%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedAug 8
Description
A vulnerability classified as problematic was found in GNU cflow up to 1.8. Affected by this vulnerability is the function yylex of the file c.c of the component Lexer. The manipulation leads to null pointer dereference. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.
CVSS vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Affected Packages1 packages
🔴Vulnerability Details
3📋Vendor Advisories
1Debian▶
CVE-2025-8735: cflow - A vulnerability classified as problematic was found in GNU cflow up to 1.8. Affe...↗2025