A vulnerability classified as problematic has been found in GNU Bison up to 3.8.2. Affected is the function code_free of the file src/scan-code.c. The manipulation leads to double free.

This vulnerability is traded as CVE-2025-8734. The attack needs to be approached locally. Furthermore, there is an exploit available.