GNU Vulnerabilities and Affected Products
Vulnerabilities associated with Bison.
Products
Clear product- Binutils31 vulnerabilities
- grub213 vulnerabilities
- LibreDWG11 vulnerabilities
- PSPP8 vulnerabilities
- elfutils6 vulnerabilities
- Emacs6 vulnerabilities
- Bourne-Again Shell (Bash)5 vulnerabilities
- inetutils5 vulnerabilities
- gawk4 vulnerabilities
- gdb4 vulnerabilities
- cflow3 vulnerabilities
- cpio3 vulnerabilities
- glibc3 vulnerabilities
- GNU C Library (glibc)3 vulnerabilities
- GNU SASL3 vulnerabilities
- Mailman3 vulnerabilities
- Bison2 vulnerabilities
- coreutils2 vulnerabilities
- GCC2 vulnerabilities
- GnuPG2 vulnerabilities
- Guix2 vulnerabilities
- gzip2 vulnerabilities
- Libgcrypt2 vulnerabilities
- ncurses2 vulnerabilities
- patch2 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2026-56390MEDIUM | Arbitrary Output Location Change in GNU BisonGNU Bison improperly handles grammar‑defined output paths. Grammar directives such as %output and %header allow specifying file paths, which are accepted without restriction and override caller‑supplied output options. When processing attacker-supplied grammar, this behavior allows directing generated files to arbitrary writable locations on the filesystem, potentially overwriting existing files accessible to the Bison process. Maintainers of this project were notified about this vulnerability… CWE-73Jul 29, 2026 | CVSS4.6v4.0 | EPSS0.133% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-56389MEDIUM | Arbitrary Command Execution in GNU BisonGNU Bison allows for an execution of an arbitrary program during HTML report generation due to improper handling of grammar-defined configuration variables. A grammar file can override the executable used for the XML‑to‑HTML transformation step via %define tool.xsltproc, which is accepted without restriction and passed directly to execvp(). When running bison --html on a attacker-provided grammar, this behavior allows execution of an arbitrary program with the privileges of the Bison process. … CWE-78Jul 29, 2026 | CVSS6.8v4.0 | EPSS0.154% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |