Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-66264.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-66264
Upstream
Published
2025-08-11T13:15:39Z
Modified
2026-04-21T04:37:49.015723Z
Summary
CVE-2025-8846 affecting package nasm 2.16.01-1
Details

A vulnerability has been found in NASM Netwide Assember 2.17rc0. Affected is the function parse_line of the file parser.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.

References

Affected packages

Azure Linux:3 / nasm

Package

Name
nasm
Purl
pkg:rpm/azure-linux/nasm

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Last affected
2.16.01-1

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-66264.json"