CVE-2025-8844: 
Linux Debian vulnerability analysis and mitigation

A vulnerability was identified in NASM (Netwide Assembler) version 2.17rc0, tracked as CVE-2025-8844. The vulnerability affects the parse_smacro_template function in the preproc.c file, where a null pointer dereference condition can occur. The issue was discovered and disclosed on August 11, 2025 (NVD).

The vulnerability is caused by insufficient validation of pointer values in the parse_smacro_template function, which leads to an attempt to access memory at address 0x000000000001. The issue manifests when processing malformed macro template definitions with invalid radix specifiers. The vulnerability has received a CVSS v4.0 score of 4.8 (Medium) and CVSS v3.1 score of 3.3 (Low) (Bugzilla).

The vulnerability results in a segmentation fault and program crash when exploited. The impact is limited to local attacks and primarily affects the availability of the NASM assembler. The vulnerability requires local access to exploit and does not appear to have confidentiality or integrity impacts (NVD).

The vulnerability has been publicly disclosed with a proof-of-concept exploit available. The attack requires local access and can be triggered by processing a specially crafted assembly file containing malformed macro template definitions with invalid radix specifiers (Bugzilla).

No official patch has been released yet for this vulnerability. Users are advised to exercise caution when processing untrusted assembly files and to monitor for updates from the NASM development team (Debian).