Filtered by vendor Nasm Subscriptions
Filtered by product Netwide Assembler Subscriptions
Total 67 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2004-1287 1 Nasm 1 Netwide Assembler 2023-12-22 N/A
Buffer overflow in the error function in preproc.c for NASM 0.98.38 1.2 allows attackers to execute arbitrary code via a crafted asm file, a different vulnerability than CVE-2005-1194.
CVE-2022-44370 1 Nasm 1 Netwide Assembler 2023-12-22 7.8 High
NASM v2.16 was discovered to contain a heap buffer overflow in the component quote_for_pmake() asm/nasm.c:856
CVE-2020-21528 1 Nasm 1 Netwide Assembler 2023-12-22 5.5 Medium
A Segmentation Fault issue discovered in in ieee_segment function in outieee.c in nasm 2.14.03 and 2.15 allows remote attackers to cause a denial of service via crafted assembly file.
CVE-2019-8343 1 Nasm 1 Netwide Assembler 2023-12-22 N/A
In Netwide Assembler (NASM) 2.14.02, there is a use-after-free in paste_tokens in asm/preproc.c.
CVE-2008-2719 1 Nasm 1 Netwide Assembler 2023-11-07 N/A
Off-by-one error in the ppscan function (preproc.c) in Netwide Assembler (NASM) 2.02 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted file that triggers a stack-based buffer overflow.
CVE-2023-38667 1 Nasm 1 Netwide Assembler 2023-08-28 5.5 Medium
Stack-based buffer over-read in function disasm in nasm 2.16 allows attackers to cause a denial of service.
CVE-2023-38668 1 Nasm 1 Netwide Assembler 2023-08-28 5.5 Medium
Stack-based buffer over-read in disasm in nasm 2.16 allows attackers to cause a denial of service (crash).
CVE-2023-38665 1 Nasm 1 Netwide Assembler 2023-08-26 5.5 Medium
Null pointer dereference in ieee_write_file in nasm 2.16rc0 allows attackers to cause a denial of service (crash).
CVE-2020-18780 1 Nasm 1 Netwide Assembler 2023-08-25 5.5 Medium
A Use After Free vulnerability in function new_Token in asm/preproc.c in nasm 2.14.02 allows attackers to cause a denial of service via crafted nasm command.
CVE-2020-21686 1 Nasm 1 Netwide Assembler 2023-08-25 5.5 Medium
A stack-use-after-scope issue discovered in expand_mmac_params function in preproc.c in nasm before 2.15.04 allows remote attackers to cause a denial of service via crafted asm file.
CVE-2022-29654 1 Nasm 1 Netwide Assembler 2023-08-25 5.5 Medium
Buffer overflow vulnerability in quote_for_pmake in asm/nasm.c in nasm before 2.15.05 allows attackers to cause a denial of service via crafted file.
CVE-2020-21687 1 Nasm 1 Netwide Assembler 2023-08-25 5.5 Medium
Buffer Overflow vulnerability in scan function in stdscan.c in nasm 2.15rc0 allows remote attackers to cause a denial of service via crafted asm file.
CVE-2020-21685 1 Nasm 1 Netwide Assembler 2023-08-25 5.5 Medium
Buffer Overflow vulnerability in hash_findi function in hashtbl.c in nasm 2.15rc0 allows remote attackers to cause a denial of service via crafted asm file.
CVE-2023-31722 1 Nasm 1 Netwide Assembler 2023-05-25 7.8 High
There exists a heap buffer overflow in nasm 2.16.02rc1 (GitHub commit: b952891).
CVE-2022-44369 1 Nasm 1 Netwide Assembler 2023-04-05 5.5 Medium
NASM 2.16 (development) is vulnerable to 476: Null Pointer Dereference via output/outaout.c.
CVE-2022-44368 1 Nasm 1 Netwide Assembler 2023-04-05 5.5 Medium
NASM v2.16 was discovered to contain a null pointer deference in the NASM component
CVE-2022-46457 1 Nasm 1 Netwide Assembler 2023-02-09 5.5 Medium
NASM v2.16 was discovered to contain a segmentation violation in the component ieee_write_file at /output/outieee.c.
CVE-2022-46456 1 Nasm 1 Netwide Assembler 2023-01-18 6.1 Medium
NASM v2.16 was discovered to contain a global buffer overflow in the component dbgdbg_typevalue at /output/outdbg.c.
CVE-2022-41420 1 Nasm 1 Netwide Assembler 2022-10-05 5.5 Medium
nasm v2.16 was discovered to contain a stack overflow in the Ndisasm component
CVE-2018-1000886 1 Nasm 1 Netwide Assembler 2022-10-03 N/A
nasm version 2.14.01rc5, 2.15 contains a Buffer Overflow vulnerability in asm/stdscan.c:130 that can result in Stack-overflow caused by triggering endless macro generation, crash the program. This attack appear to be exploitable via a crafted nasm input file.