CVE-2018-20535: Use After Free

There is a use-after-free at asm/preproc.c function ppgetline in Netwide Assembler NASM 2.14rc16 that will cause a denial of service during a line-number increment attempt...

PT-2018-15416

Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.14rc16 Description The issue is related to a use-after-free error in the pp getline function at asm/preproc.c. This error can cause a denial of service when attempting to increment the line number...

PT-2018-15419

Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.14rc16 Description The issue is related to a use-after-free error in the pp getline function located at asm/preproc.c. This error can cause a denial of service during certain finishes tests. Recommendations For...

CVE-2018-20538: Use After Free

There is a use-after-free at asm/preproc.c function ppgetline in Netwide Assembler NASM 2.14rc16 that will cause a denial of service during certain finishes tests...

CVE-2018-19755

There is an illegal address access at asm/preproc.c function: ismmacro in Netwide Assembler NASM 2.14rc16 that will cause a denial of service out-of-bounds array access because a certain conversion can result in a negative integer...

PT-2018-15071

Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.14rc16 Description The issue is related to an illegal address access in the is mmacro function at asm/preproc.c, which can cause a denial of service due to an out-of-bounds array access. This occurs because a...

CVE-2018-19755: Improper Input Validation

There is an illegal address access at asm/preproc.c function: ismmacro in Netwide Assembler NASM 2.14rc16 that will cause a denial of service out-of-bounds array access because a certain conversion can result in a negative integer...

CVE-2018-19216

Netwide Assembler NASM before 2.13.02 has a use-after-free in detoken at asm/preproc.c...

CVE-2018-19213

Netwide Assembler NASM through 2.14rc16 has memory leaks that may lead to DoS, related to nasmmalloc in nasmlib/malloc.c...

CVE-2018-19214

Netwide Assembler NASM 2.14rc15 has a heap-based buffer over-read in expandmmacparams in asm/preproc.c for insufficient input...

CVE-2018-19215: Out-of-bounds Read

Netwide Assembler NASM 2.14rc16 has a heap-based buffer over-read in expandmmacparams in asm/preproc.c for the special cases of the % and $ and ! characters...

CVE-2018-19209: NULL Pointer Dereference

Netwide Assembler NASM 2.14rc15 has a NULL pointer dereference in the function findlabel in asm/labels.c that will lead to a DoS attack...

CVE-2018-19214: Out-of-bounds Read

Netwide Assembler NASM 2.14rc15 has a heap-based buffer over-read in expandmmacparams in asm/preproc.c for insufficient input...

PT-2018-14868

Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.14rc16 Description The issue is related to a heap-based buffer over-read in the expand mmac params function in asm/preproc.c, specifically for the special cases of the % and $ and ! characters. Recommendations...

PT-2018-14864

Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.14rc15 Description The issue is related to a NULL pointer dereference in the find label function located in asm/labels.c. This can lead to a denial of service DoS attack. Recommendations For Netwide Assembler...

CVE-2018-19216: Use After Free

Netwide Assembler NASM before 2.13.02 has a use-after-free in detoken at asm/preproc.c...

PT-2018-14867

Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.14rc15 Description The issue is related to a heap-based buffer over-read in the expand mmac params function located in asm/preproc.c. This occurs due to insufficient input. Recommendations For Netwide Assembler...

PT-2018-14866

Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM versions prior to 2.14rc17 Description The issue is related to memory leaks that may lead to Denial of Service DoS, specifically tied to the nasm malloc function in nasmlib/malloc.c. Recommendations For versions prior to...

CVE-2018-19213: Missing Release of Resource after Effective Lifetime

Netwide Assembler NASM through 2.14rc16 has memory leaks that may lead to DoS, related to nasmmalloc in nasmlib/malloc.c...

CVE-2018-16999: Out-of-bounds Write

Netwide Assembler NASM 2.14rc15 has an invalid memory write segmentation fault in expandsmacro in preproc.c, which allows attackers to cause a denial of service via a crafted input file...