CVE-2025-8734

Name of the Vulnerable Software and Affected Versions GNU Bison versions through 3.8.2

Description A problematic issue exists in GNU Bison due to a double free in the code free() function located in the src/scan-code.c file. This issue requires local access for exploitation. The exploit details have been publicly disclosed.

Recommendations Update to a version beyond 3.8.2. As a temporary workaround, consider restricting access to the code free() function until a patch is available.