NASM’s disasm() function contains a stack based buffer overflow when formatting disassembly output, allowing an attacker triggered out-of-bounds write when `slen` exceeds the buffer capacity.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HNasm Netwide Assembler
APPNasm3.02
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Memory
CWE
Related vulnerabilities
CVE-2026-6068CRITICAL9.6PL ✓ten sam produkt
NASM: heap use-after-free w przetwarzaniu plików odpowiedzi (-@)
CVE-2020-24978CRITICAL9.8ten sam produkt
In NASM 2.15.04rc3, there is a double-free vulnerability in pp_tokline asm/preproc.c. This is fixed in commit ...
CVE-2023-31722HIGH7.8ten sam produkt
There exists a heap buffer overflow in nasm 2.16.02rc1 (GitHub commit: b952891).
CVE-2022-44370HIGH7.8ten sam produkt
NASM v2.16 was discovered to contain a heap buffer overflow in the component quote_for_pmake() asm/nasm.c:856
CVE-2019-20352HIGH7.1ten sam produkt
In Netwide Assembler (NASM) 2.15rc0, a heap-based buffer over-read occurs (via a crafted .asm file) in set_tex...