58 matches found
EUVD-2023-42463
Malicious code in bioql PyPI...
EUVD-2022-33980
Malicious code in bioql PyPI...
EUVD-2022-47313
Malicious code in bioql PyPI...
EUVD-2022-44613
Malicious code in bioql PyPI...
AZL-66261 CVE-2025-8845 affecting package nasm 2.16.01-2
A vulnerability was identified in NASM Netwide Assember 2.17rc0. This issue affects the function assemblefile of the file nasm.c. The manipulation leads to stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be...
Use After Free
Overview Affected versions of this package are vulnerable to Use After Free via the dodirective function in preproc.c. An attacker can cause a denial of service or unintended behavior by triggering access to memory after it has been freed. Remediation There is no fixed version for nasm. Reference...
CVE-2025-8844 NASM Netwide Assember preproc.c parse_smacro_template null pointer dereference
A vulnerability was determined in NASM Netwide Assember 2.17rc0. This vulnerability affects the function parsesmacrotemplate of the file preproc.c. The manipulation leads to null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used...
AZL-66207 CVE-2025-8842 affecting package nasm 2.16-1
A vulnerability has been found in NASM Netwide Assember 2.17rc0. Affected by this issue is the function dodirective of the file preproc.c. The manipulation leads to use after free. An attack has to be approached locally. The exploit has been disclosed to the public and may be used...
Huawei EulerOS: Security Advisory for nasm (EulerOS-SA-2025-1602)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP12 : nasm (EulerOS-SA-2025-1602)
According to the versions of the nasm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Buffer overflow vulnerability in quoteforpmake in asm/nasm.c in nasm before 2.15.05 allows attackers to cause a denial of service via crafted...
SUSE CVE-2020-21686
A stack-use-after-scope issue discovered in expandmmacparams function in preproc.c in nasm before 2.15.04 allows remote attackers to cause a denial of service via crafted asm file...
DEBIAN-CVE-2020-18780
A Use After Free vulnerability in function newToken in asm/preproc.c in nasm 2.14.02 allows attackers to cause a denial of service via crafted nasm command...
nasm 安全漏洞
Nasm is an open source programming tool software by The Nasm Development Team team. A security vulnerability exists in nasm versions 2.14.03 and 2.15, which stems from a segmentation error in the ieeesegment function of outieee.c. The vulnerability is caused by a bug in the outieee.c function...
Nasm 安全漏洞
Nasm is an open source programming tool software by The Nasm Development Team team. A security vulnerability exists in versions prior to Nasm 2.15.05 that stems from the presence of a buffer overflow vulnerability that allows an attacker to cause a denial of service via a crafted file...
nasm 缓冲区错误漏洞
Nasm is an open source programming tool software by The Nasm Development Team team. A security vulnerability exists in nasm version 2.15rc0 due to a buffer overflow vulnerability in the hashfindi function in hashtbl.c. The vulnerability is due to a buffer overflow vulnerability in the hashfindi...
PT-2023-11593
Name of the Vulnerable Software and Affected Versions nasm versions 2.14.03 through 2.15 Description A Segmentation Fault issue in the ieee segment function in outieee.c allows remote attackers to cause a denial of service via crafted assembly files. Recommendations For nasm versions 2.14.03...
UBUNTU-CVE-2023-31722
There exists a heap buffer overflow in nasm 2.16.02rc1 GitHub commit: b952891...
Use After Free
Overview Affected versions of this package are vulnerable to Use After Free via the ppgetline function at /nasm/nasm-pp.c. Remediation There is no fixed version for yasm. References - GitHub Issue - PoC Credit: randomssr...