Skip to content
OpenAdvisories

Package · Debian

bison

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Medium 4.6
    CVE-2026-56390

    Arbitrary Output Location Change in GNU Bison

    GNU Bison improperly handles grammar‑defined output paths. Grammar directives such as %output and %header allow specifying file paths, which are accepted without restriction and override caller‑supplied output options. When processing attacker-supplied gramma…

    GNU Bison bison bison Debian Ubuntu
  • Medium 6.8
    CVE-2026-56389

    Arbitrary Command Execution in GNU Bison

    GNU Bison allows for an execution of an arbitrary program during HTML report generation due to improper handling of grammar-defined configuration variables. A grammar file can override the executable used for the XML‑to‑HTML transformation step via %define to…

    GNU Bison bison bison Debian Ubuntu
  • Unscored —
    CVE-2020-24240

    GNU Bison before 3.7.1 has a use-after-free in _obstack_free in lib/obstack.c (called from gram_lex) when a '\0' byte i…

    bison bison bison Debian Ubuntu Alpine
  • Unscored —
    CVE-2020-14150

    GNU Bison before 3.5.4 allows attackers to cause a denial of service (application crash). NOTE: there is a risk only if…

    bison bison Debian Ubuntu