Heap-based Buffer Overflow in NASM Netwide Assembler Software
CVE-2025-8843

4.8MEDIUM

Key Information:

Vendor

Nasm

Status
Netwide Assember
Vendor
CVE Published:
11 August 2025

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2025-8843?

A vulnerability exists in the NASM Netwide Assembler, specifically within the macho_no_dead_strip function found in outmacho.c. This weakness allows for a heap-based buffer overflow, which can be exploited by users with local access. The vulnerability has been publicly disclosed, increasing the risk of potential exploits. Security measures should be implemented promptly to mitigate the risk associated with this flaw, especially for the affected versions.

Affected Version(s)

Netwide Assember 2.17rc0

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2025-8843 - Proof of Concept

References

https://vuldb.com/?id.319377
vdb-entrytechnical-description
https://vuldb.com/?ctiid.319377
signaturepermissions-required
https://vuldb.com/?submit.623185
third-party-advisory

CVSS V4

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

xdcao (VulDB User)
.