AZL-26634 CVE-2023-31973 affecting package yasm 1.3.0-17

yasm v1.3.0 was discovered to contain a use after free via the function expandmmacparams at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy...

CVE-2023-31973

yasm v1.3.0 was discovered to contain a use after free via the function expandmmacparams at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy...

CVE-2023-31973

CVE-2023-31973 affects yasm v1.3.0 with a use-after-free in expand_mmac_params() in nasm/nasm-pp.c. The vulnerability is disputed by third parties as a bug rather than a security flaw per YASM policy. NVD metrics show CVSS v3.1 base scores: 5.5 (MEDIUM) with LOCAL/LOW complexity, and UI-required;...