GNU cflow vulnerabilities (CVE)

CVE records published for GNU cflow, newest first. Follow to get an email when a new one appears.

2 results
5.3Medium
CVE-2025-8736

GNU cflow Lexer c.c yylex buffer overflow

GNU cflow

A vulnerability, which was classified as critical, has been found in GNU cflow up to 1.8. Affected by this issue is the function yylex of the file c.c of the component Lexer. The manipulation leads to buffer overflow. Local access is required to approach this…

3.3Low
CVE-2025-8735

GNU cflow Lexer c.c yylex null pointer dereference

GNU cflow

A vulnerability classified as problematic was found in GNU cflow up to 1.8. Affected by this vulnerability is the function yylex of the file c.c of the component Lexer. The manipulation leads to null pointer dereference. An attack has to be approached locally…