Lucene search
K

745 matches found

OSV
OSV
added 2026/04/10 2:16 p.m.2 views

UBUNTU-CVE-2026-6067

A heap buffer overflow vulnerability exists in the Netwide Assembler NASM due to a lack of bounds checking in the objdirective function. This vulnerability can be exploited by a user assembling a malicious .asm file, potentially leading to heap memory corruption, denial of service crash, and...

7.5CVSS6.3AI score0.00018EPSS
Exploits1References3
Cvelist
Cvelist
added 2026/04/10 1:30 p.m.21 views

CVE-2026-6069 CVE-2026-6069

NASM’s disasm function contains a stack based buffer overflow when formatting disassembly output, allowing an attacker triggered out-of-bounds write when slen exceeds the buffer capacity...

0.00022EPSS
Exploits1References1
CVE
CVE
added 2026/04/10 1:30 p.m.12 views

CVE-2026-6068

CVE-2026-6068 affects NASM. A heap-use-after-free in response file processing (-@) stores a dangling pointer to freed memory in the global depend_file, which is later dereferenced after the response-file buffer is freed. This can cause data corruption and, per sources, may enable remote code exec...

9.6CVSS6.3AI score0.00029EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2026/04/10 1:30 p.m.10 views

CVE-2026-6067

The CVE-2026-6067 entry concerns the Netwide Assembler (NASM). A heap buffer overflow is caused by insufficient bounds checking in the obj_directive() function. An attacker could exploit this by assembling a malicious .asm file, leading to heap memory corruption, crash (DoS), or arbitrary code ex...

7.5CVSS6.3AI score0.00018EPSS
Exploits1References1Affected Software1
Debian CVE
Debian CVE
added 2026/04/10 1:30 p.m.1 views

CVE-2026-6067

A heap buffer overflow vulnerability exists in the Netwide Assembler NASM due to a lack of bounds checking in the objdirective function. This vulnerability can be exploited by a user assembling a malicious .asm file, potentially leading to heap memory corruption, denial of service crash, and...

7.5CVSS6.1AI score0.00018EPSS
Exploits1
Vulnrichment
Vulnrichment
added 2026/04/10 1:30 p.m.1 views

CVE-2026-6067 CVE-2026-6067

A heap buffer overflow vulnerability exists in the Netwide Assembler NASM due to a lack of bounds checking in the objdirective function. This vulnerability can be exploited by a user assembling a malicious .asm file, potentially leading to heap memory corruption, denial of service crash, and...

6.3AI score0.00018EPSS
Exploits1References1
Cvelist
Cvelist
added 2026/04/10 1:30 p.m.26 views

CVE-2026-6067 CVE-2026-6067

A heap buffer overflow vulnerability exists in the Netwide Assembler NASM due to a lack of bounds checking in the objdirective function. This vulnerability can be exploited by a user assembling a malicious .asm file, potentially leading to heap memory corruption, denial of service crash, and...

0.00018EPSS
Exploits1References1
CNNVD
CNNVD
added 2026/04/10 12:0 a.m.2 views

NASM 资源管理错误漏洞

NASM is an open-source, cross-platform assembler tool developed by The Netwide Assembler. NASM has a resource management vulnerability; this flaw arises from the reuse of resources after they are released during response file processing, which may lead to data corruption or unexpected behaviors...

9.6CVSS5.8AI score0.00029EPSS
Exploits1References2
CNNVD
CNNVD
added 2026/04/10 12:0 a.m.3 views

NASM 安全漏洞

NASM is a cross-platform assembler tool open source from The Netwide Assembler. NASM has a security vulnerability, which stems from the absence of boundary checks in the objdirective function. This vulnerability could lead to heap buffer overflows, denial of service, and the execution of arbitrar...

7.5CVSS6.1AI score0.00018EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2026/04/10 12:0 a.m.3 views

PT-2026-31917

A heap buffer overflow vulnerability exists in the Netwide Assembler NASM due to a lack of bounds checking in the obj directive function. This vulnerability can be exploited by a user assembling a malicious .asm file, potentially leading to heap memory corruption, denial of service crash, and...

6.3AI score0.00018EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2026/04/10 12:0 a.m.2 views

PT-2026-31918

Name of the Vulnerable Software and Affected Versions NASM affected versions not specified Description A heap use after free issue exists during response file -@ processing. A dangling pointer to freed memory is stored in the global depend file and subsequently dereferenced because the...

9.6CVSS6.2AI score0.00029EPSS
Exploits1References14
CNNVD
CNNVD
added 2026/04/10 12:0 a.m.3 views

NASM 安全漏洞

NASM is an open-source, cross-platform assembler tool developed by The Netwide Assembler. NASM has a security vulnerability, which stems from a stack-based buffer overflow in the disasm function, potentially leading to out-of-bounds writes...

7.5CVSS6.1AI score0.00022EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2026/04/10 12:0 a.m.1 views

PT-2026-31919

NASM’s disasm function contains a stack based buffer overflow when formatting disassembly output, allowing an attacker triggered out-of-bounds write when slen exceeds the buffer capacity...

6AI score0.00022EPSS
Exploits1References2
EUVD
EUVD
added 2026/03/28 12:30 p.m.5 views

EUVD-2017-18949

Flat Assembler 1.71.21 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying oversized input to the application. Attackers can craft malicious assembly input exceeding 5895 bytes to overwrite the instruction pointer and execute...

8.6CVSS6.6AI score0.00025EPSS
Exploits1References4
NVD
NVD
added 2026/03/28 12:16 p.m.3 views

CVE-2017-20228

Flat Assembler 1.71.21 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying oversized input to the application. Attackers can craft malicious assembly input exceeding 5895 bytes to overwrite the instruction pointer and execute...

8.6CVSS0.00025EPSS
Exploits1References3
Cvelist
Cvelist
added 2026/03/28 12:0 p.m.26 views

CVE-2017-20228 Flat Assembler 1.71.21 Stack-Based Buffer Overflow ROP

Flat Assembler 1.71.21 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying oversized input to the application. Attackers can craft malicious assembly input exceeding 5895 bytes to overwrite the instruction pointer and execute...

8.6CVSS0.00025EPSS
Exploits1References3
CVE
CVE
added 2026/03/28 12:0 p.m.7 views

CVE-2017-20228

CVE-2017-20228 concerns Flat Assembler 1.71.21, which contains a stack-based buffer overflow. The vulnerability arises from oversized input (exceeding 5895 bytes) fed to the application, enabling local attackers to overwrite the instruction pointer and construct return-oriented programming chains...

8.6CVSS6.6AI score0.00025EPSS
Exploits1References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/28 12:0 p.m.4 views

CVE-2017-20228

Flat Assembler 1.71.21 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying oversized input to the application. Attackers can craft malicious assembly input exceeding 5895 bytes to overwrite the instruction pointer and execute...

8.6CVSS6.6AI score0.00025EPSS
Exploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/28 12:0 p.m.1 views

CVE-2017-20228 Flat Assembler 1.71.21 Stack-Based Buffer Overflow ROP

Flat Assembler 1.71.21 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying oversized input to the application. Attackers can craft malicious assembly input exceeding 5895 bytes to overwrite the instruction pointer and execute...

8.6CVSS6.6AI score0.00025EPSS
Exploits1References3
CNNVD
CNNVD
added 2026/03/28 12:0 a.m.2 views

Flat Assembler 缓冲区错误漏洞

Flat Assembler is an assembly language compiler developed by Tomasz Grysztar, designed to work on multiple platforms. Version 1.71.21 of Flat Assembler contains a buffer overflow vulnerability. This vulnerability stems from a stack buffer overflow, which could allow local attackers to execute...

8.6CVSS6.5AI score0.00025EPSS
Exploits1References3
Rows per page
Query Builder