MEDIUM🇵🇱 Wersja polska

CVE-2020-21686

CVSS 5.5v3.1pub. 2023-08-22upd. 2024-11-21

A stack-use-after-scope issue discovered in expand_mmac_params function in preproc.c in nasm before 2.15.04 allows remote attackers to cause a denial of service via crafted asm file.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

  • Nasm Netwide Assembler

    APP
    Nasm
    < 2.15.04
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoS
CWE
References

Related vulnerabilities

CVE-2026-6068CRITICAL9.6PL ✓ten sam produkt

NASM: heap use-after-free w przetwarzaniu plików odpowiedzi (-@)

CVE-2020-24978CRITICAL9.8ten sam produkt

In NASM 2.15.04rc3, there is a double-free vulnerability in pp_tokline asm/preproc.c. This is fixed in commit ...

CVE-2026-6069HIGH7.5ten sam produkt

NASM’s disasm() function contains a stack based buffer overflow when formatting disassembly output, allowing a...

CVE-2023-31722HIGH7.8ten sam produkt

There exists a heap buffer overflow in nasm 2.16.02rc1 (GitHub commit: b952891).

CVE-2022-44370HIGH7.8ten sam produkt

NASM v2.16 was discovered to contain a heap buffer overflow in the component quote_for_pmake() asm/nasm.c:856