Null Pointer Dereference Vulnerability in NASM Netwide Assembler 2.17rc0
CVE-2025-8844

4.8MEDIUM

Key Information:

Vendor

Nasm

Status
Netwide Assember
Vendor
CVE Published:
11 August 2025

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2025-8844?

A vulnerability in the NASM Netwide Assembler version 2.17rc0 has been identified, specifically within the parsing function parse_smacro_template located in preproc.c. This flaw allows for a null pointer dereference, which can be exploited under local conditions. Public disclosure of this exploit raises concerns, emphasizing the need for users to be cautious and to apply necessary security measures.

Affected Version(s)

Netwide Assember 2.17rc0

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2025-8844 - Proof of Concept

References

https://vuldb.com/?id.319378
vdb-entrytechnical-description
https://vuldb.com/?ctiid.319378
signaturepermissions-required
https://vuldb.com/?submit.623187
third-party-advisory

CVSS V4

Score:
4.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

xdcao (VulDB User)
.