PT-2026-50766

An issue was discovered in yasm version 1.3.0. There is a use-after-free in error in modules/preprocs/nasm/nasm-pp.c...

PT-2026-50763

An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in expand mmacro in modules/preprocs/nasm/nasm-pp.c...

PT-2026-50767

A memory leak issue discovered in YASM v.1.3.0 allows a local attacker to cause a denial of service via the new Token function in the modules/preprocs/nasm/nasm-pp:1512...

PT-2026-50753

An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in do directive in modules/preprocs/nasm/nasm-pp.c...

Fedora 44 : nasm (2026-eaae48ece0)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-eaae48ece0 advisory. Fix for CVE-2026-6067 . Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 45 : nasm (2026-c346e5cd24)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c346e5cd24 advisory. Automatic update for nasm-3.01-3.fc45. Changelog Wed Apr 22 2026 Dominik Mierzejewski - 3.01-3 - fix CVE-2026-6067 resolves rhbz2458087, rhbz2458089...

USN-8248-2: NASM regression

USN-8248-1 fixed vulnerabilities in NASM. Unfortunately the update introduced a regression which could cause NASM to crash. This update fixes the problem by reverting the fix for CVE-2021-33450 and CVE-2021-33452 in Ubuntu 24.04 LTS. We apologize for the inconvenience. Original advisory details:...

JLSEC-2026-202

Buffer overflow vulnerability in quoteforpmake in asm/nasm.c in nasm before 2.15.05 allows attackers to cause a denial of service via crafted file...

PT-2026-38505

A stack-use-after-scope issue discovered in expand mmac params function in preproc.c in nasm before 2.15.04 allows remote attackers to cause a denial of service via crafted asm file...

PT-2026-38506

Buffer overflow vulnerability in quote for pmake in asm/nasm.c in nasm before 2.15.05 allows attackers to cause a denial of service via crafted file...

PT-2026-38508

NASM v2.16 was discovered to contain a global buffer overflow in the component dbgdbg typevalue at /output/outdbg.c...

PT-2026-38507

NASM v2.16 was discovered to contain a heap buffer overflow in the component quote for pmake asm/nasm.c:856...

PT-2026-38503

nasm version 2.14.01rc5, 2.15 contains a Buffer Overflow vulnerability in asm/stdscan.c:130 that can result in Stack-overflow caused by triggering endless macro generation, crash the program. This attack appear to be exploitable via a crafted nasm input file...

PT-2026-38504

A Segmentation Fault issue discovered in in ieee segment function in outieee.c in nasm 2.14.03 and 2.15 allows remote attackers to cause a denial of service via crafted assembly file...

Linux Distros Unpatched Vulnerability : CVE-2026-6067

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap buffer overflow vulnerability exists in the Netwide Assembler NASM due to a lack of bounds checking in the objdirective function. This vulnerability can ...

SUSE CVE-2026-6068

NASM contains a heap use after free vulnerability in response file -@ processing where a dangling pointer to freed memory is stored in the global dependfile and later dereferenced, as the response-file buffer is freed before the pointer is used, allowing for data corruption or remote code executi...

EUVD-2026-21382

NASM’s disasm function contains a stack based buffer overflow when formatting disassembly output, allowing an attacker triggered out-of-bounds write when slen exceeds the buffer capacity...

Stack-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Stack-based Buffer Overflow via the disasm function. An attacker can cause a stack-based buffer overflow by providing input that causes slen to exceed the buffer capacity, resulting in an out-of-bounds write when formatting disassembly...

DEBIAN-CVE-2026-6067

A heap buffer overflow vulnerability exists in the Netwide Assembler NASM due to a lack of bounds checking in the objdirective function. This vulnerability can be exploited by a user assembling a malicious .asm file, potentially leading to heap memory corruption, denial of service crash, and...

DEBIAN-CVE-2026-6069

NASM’s disasm function contains a stack based buffer overflow when formatting disassembly output, allowing an attacker triggered out-of-bounds write when slen exceeds the buffer capacity...