Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-66210.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-66210
Upstream
Published
2025-08-11T11:15:27Z
Modified
2026-04-21T04:37:48.523909Z
Summary
CVE-2025-8843 affecting package nasm 2.16-1
Details

A vulnerability was found in NASM Netwide Assember 2.17rc0. This affects the function machonodead_strip of the file outmacho.c. The manipulation leads to heap-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.

References

Affected packages

Azure Linux:2 / nasm

Package

Name
nasm
Purl
pkg:rpm/azure-linux/nasm

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Last affected
2.16-1

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-66210.json"