CVE-2021-33467: Use After Free

An issue was discovered in yasm version 1.3.0. There is a use-after-free in ppgetline in modules/preprocs/nasm/nasm-pp.c...

CVE-2021-33457: NULL Pointer Dereference

An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in expandmmacparams in modules/preprocs/nasm/nasm-pp.c...

PT-2022-10261

Name of the Vulnerable Software and Affected Versions yasm version 1.3.0 Description An issue was discovered in the expand mmacro function in modules/preprocs/nasm/nasm-pp.c, which results in a NULL pointer dereference. Recommendations For yasm version 1.3.0, consider avoiding the use of the expa...

PT-2022-10254

Name of the Vulnerable Software and Affected Versions yasm version 1.3.0 Description An issue was discovered in the find cc function in modules/preprocs/nasm/nasm-pp.c, which leads to a NULL pointer dereference. Recommendations For yasm version 1.3.0, consider disabling the find cc function as a...

PT-2022-10251

Name of the Vulnerable Software and Affected Versions yasm version 1.3.0 Description An issue was discovered in yasm, which involves a NULL pointer dereference in the do directive function located in modules/preprocs/nasm/nasm-pp.c. Recommendations For yasm version 1.3.0, consider avoiding the us...

PT-2022-10255

Name of the Vulnerable Software and Affected Versions yasm version 1.3.0 Description An issue was discovered in the nasm parser directive function in modules/parsers/nasm/nasm-parse.c, which results in a NULL pointer dereference. Recommendations For yasm version 1.3.0, at the moment, there is no...

Yasm code issue vulnerabilities

yasm is a completely rewritten Netwide assembler open-sourced by yasm. A denial of service vulnerability exists in yasm version 1.3.0, which stems from the presence of a NULL pointer dereference in the hash function in modules/preprocs/nasm/nasm-pp.c. An attacker could exploit this vulnerability ...

libvpx security update

1.3.0-8 - Fix for CVE-2020-0034 - Resolves: rhbz1823909 1.3.0-7 - Fix for CVE-2019-9232 and CVE-2019-9433 - Resolves: rhbz1796085, rhbz1796099 1.3.0-6 - Fix for CVE-2017-0393 - Resolves: rhbz1779498 1.3.0-4 - fix Illegal Instruction abort 1.3.0-3 - update library symbol list for 1.3.0 from Debian...

Denial of service vulnerability in yasm

yasm is a completely rewritten NASM assembly. It supports both x86 and AMD64 instruction sets. A denial of service vulnerability exists in yasm, which can be exploited by an attacker to cause a system crash...

Denial of service vulnerability in yasm (CNVD-2020-12821)

yasm is a completely rewritten NASM assembly. It supports both x86 and AMD64 instruction sets. A denial of service vulnerability exists in yasm, which can be exploited by an attacker to cause a system crash...

Denial of service vulnerability in yasm (CNVD-2020-12820)

yasm is a completely rewritten NASM assembly. It supports both x86 and AMD64 instruction sets. A denial of service vulnerability exists in yasm, which can be exploited by an attacker to cause a system crash...

linux/x86-64 execve/bin/sh 30 bytes

linux/x86-64 execve/bin/sh 30 bytes. Shellcode exploit for linx86-64 platform / William Borskey 2015 Compile with: gcc -fno-stack-protector -z execstack Shellcode written in 64 bit Intel assembly using yasm. 1 ; int execveconst char filename, char const argv, char const envp; 2 BITS 64 3 4 sectio...

libvpx security update

0.9.0-8 - Fix CVE-2010-4203 Resolves: rhbz652440 0.9.0-7 - Import 0.9.0-6 package from Fedora - Add patch porting yasm syntax to gas Related: rhbz603113...

CVE-2024-25760

The connected sources identify CVE-2024-25760 as a withdrawn candidate and do not describe an active issue in that CVE entry. However, separate reports about the same Yasm component disclose a concrete vulnerability: memory leak in yasm 1.3.0, specifically in /yasm/tools/genmacro/genmacro.c. Repo...