Lucene search
GoogleOSV:CVE-2023-31725HistoryMay 17, 2023 - 3:15 p.m.
CVE-2023-31725
2023-05-1715:15:08
Google
osv.dev
1
yasm
version 1.3.0.55.g101bc
heap-use-after-free
expand_mmac_params
nasm-pp.c
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
6.9 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
19.1%
yasm 1.3.0.55.g101bc was discovered to contain a heap-use-after-free via the function expand_mmac_params at yasm/modules/preprocs/nasm/nasm-pp.c.
Related
debiancve
debiancve
CVE-2023-31725
2023-05-17 15:15:08
cvelist
cvelist
CVE-2023-31725
2023-05-17 00:00:00
prion
prion
Heap overflow
2023-05-17 15:15:00
ubuntucve
ubuntucve
CVE-2023-31725
2023-05-17 00:00:00
cve
cve
CVE-2023-31725
2023-05-17 15:15:08
nvd
nvd
CVE-2023-31725
2023-05-17 15:15:08
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
6.9 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
19.1%
Related for OSV:CVE-2023-31725