CVE-2026-6067: Out-of-bounds Write

A heap buffer overflow vulnerability exists in the Netwide Assembler NASM due to a lack of bounds checking in the objdirective function. This vulnerability can be exploited by a user assembling a malicious .asm file, potentially leading to heap memory corruption, denial of service crash, and...

CVE-2020-18974

Buffer Overflow in Netwide Assembler NASM v2.15.xx allows attackers to cause a denial of service via 'crc64i' in the component 'nasmlib/crc64'. This issue is different than CVE-2019-7147...

CVE-2020-18974: Buffer Copy without Checking Size of Input

Buffer Overflow in Netwide Assembler NASM v2.15.xx allows attackers to cause a denial of service via 'crc64i' in the component 'nasmlib/crc64'. This issue is different than CVE-2019-7147...

CVE-2020-24242

In Netwide Assembler NASM 2.15rc10, SEGV can be triggered in toktext in asm/preproc.c by accessing READ memory...

CVE-2020-24241

In Netwide Assembler NASM 2.15rc10, there is heap use-after-free in saawbytes in nasmlib/saa.c...

PT-2020-15670

Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.15rc10 Description The issue is related to a heap use-after-free in the saa wbytes function located in nasmlib/saa.c. Recommendations For Netwide Assembler NASM version 2.15rc10, consider updating to a newer...

CVE-2020-24241: Use After Free

In Netwide Assembler NASM 2.15rc10, there is heap use-after-free in saawbytes in nasmlib/saa.c...

CVE-2020-24242: Undefined Security Weakness

In Netwide Assembler NASM 2.15rc10, SEGV can be triggered in toktext in asm/preproc.c by accessing READ memory...

PT-2020-15671

Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.15rc10 Description The issue can cause a SEGV in the tok text function located in asm/preproc.c when accessing READ memory. Recommendations For Netwide Assembler NASM version 2.15rc10, consider avoiding the use...

PT-2020-1571

Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.15rc0 Description A heap-based buffer over-read issue occurs in the set text free function when called from expand one smacro in asm/preproc.c, potentially allowing an attacker to impact the confidentiality,...

CVE-2019-20334

In Netwide Assembler NASM 2.14.02, stack consumption occurs in expr functions in asm/eval.c. This potentially affects the relationships among expr0, expr1, expr2, expr3, expr4, expr5, and expr6 and stdscan in asm/stdscan.c. This is similar to CVE-2019-6290 and CVE-2019-6291...

CVE-2019-20334: Uncontrolled Recursion

In Netwide Assembler NASM 2.14.02, stack consumption occurs in expr functions in asm/eval.c. This potentially affects the relationships among expr0, expr1, expr2, expr3, expr4, expr5, and expr6 and stdscan in asm/stdscan.c. This is similar to CVE-2019-6290 and CVE-2019-6291...

CVE-2019-14248: NULL Pointer Dereference

In libnasm.a in Netwide Assembler NASM 2.14.xx, asm/pragma.c allows a NULL pointer dereference in processpragma, searchpragmalist, and nasmsetlimit when "%pragma limit" is mishandled...

PT-2019-18434

Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.14rc16 Description A buffer over-read issue exists in the crc64ib function in crc64.c in nasmlib. This can be triggered by a crafted asm input, potentially causing segmentation faults and leading to...

CVE-2019-7147: Out-of-bounds Read

A buffer over-read exists in the function crc64ib in crc64.c in nasmlib in Netwide Assembler NASM 2.14rc16. A crafted asm input can cause segmentation faults, leading to denial-of-service...

CVE-2019-6291

An issue was discovered in the function expr6 in eval.c in Netwide Assembler NASM through 2.14.02. There is a stack exhaustion problem caused by the expr6 function making recursive calls to itself in certain scenarios involving lots of '!' or '+' or '-' characters. Remote attackers could leverage...

CVE-2019-6291: Uncontrolled Recursion

An issue was discovered in the function expr6 in eval.c in Netwide Assembler NASM through 2.14.02. There is a stack exhaustion problem caused by the expr6 function making recursive calls to itself in certain scenarios involving lots of '!' or '+' or '-' characters. Remote attackers could leverage...

CVE-2019-6290: Uncontrolled Recursion

An infinite recursion issue was discovered in eval.c in Netwide Assembler NASM through 2.14.02. There is a stack exhaustion problem resulting from infinite recursion in the functions expr, rexp, bexpr and cexpr in certain scenarios involving lots of '' characters. Remote attackers could leverage...

CVE-2018-20538

There is a use-after-free at asm/preproc.c function ppgetline in Netwide Assembler NASM 2.14rc16 that will cause a denial of service during certain finishes tests...

PT-2018-15416

Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.14rc16 Description The issue is related to a use-after-free error in the pp getline function at asm/preproc.c. This error can cause a denial of service when attempting to increment the line number...