Cflow (Gnu) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 14 known versions, newest CVE from 2025-08-08. Vendor: Gnu.

CVEs of Cflow

• CVE-2025-8735 - CVSS 4.8 (medium), 2025-08-08: A vulnerability classified as problematic was found in GNU cflow up to 1.8. Affected by this vulnerability is the function yylex of the file c.c of the…
• CVE-2025-8736 - CVSS 5.3 (medium), 2025-08-08: A vulnerability, which was classified as critical, has been found in GNU cflow up to 1.8. Affected by this issue is the function yylex of the file c.c of the…
• CVE-2023-2789 - CVSS 7.5 (high), 2023-05-18: A vulnerability was found in GNU cflow 1.7. It has been rated as problematic. This issue affects the function func_body/parse_variable_declaration of the file…
• CVE-2020-23856 - CVSS 5.5 (medium), 2021-05-18: Use-after-Free vulnerability in cflow 1.6 in the void call(char *name, int line) function at src/parser.c, which could cause a denial of service via the…
• CVE-2019-16166 - CVSS 6.5 (medium), 2019-09-09: GNU cflow through 1.6 has a heap-based buffer over-read in the nexttoken function in parser.c.
• CVE-2019-16165 - CVSS 6.5 (medium), 2019-09-09: GNU cflow through 1.6 has a use-after-free in the reference function in parser.c.