636 matches found
AZL-33358 CVE-2023-49558 affecting package yasm 1.3.0-17
An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expandmmacparams function in the modules/preprocs/nasm/nasm-pp.c component...
UBUNTU-CVE-2023-49558
An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expandmmacparams function in the modules/preprocs/nasm/nasm-pp.c component...
UBUNTU-CVE-2023-49555
An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expandsmacro function in the modules/preprocs/nasm/nasm-pp.c component...
CVE-2023-46308
In Plotly plotly.js before 2.25.2, plot API calls have a risk of proto being polluted in expandObjectPaths or nestedProperty...
PT-2024-2670 · Yasm +2 · Yasm +2
Name of the Vulnerable Software and Affected Versions: YASM version 1.3.0.86.g9def Description: The issue in YASM is related to the expand mmac params function, which is associated with an uncontrolled consumption of resources. Exploitation of this issue may allow an attacker to cause a denial of...
PT-2024-2673 · Yasm +2 · Yasm +2
Name of the Vulnerable Software and Affected Versions: YASM version 1.3.0.86.g9def Description: The issue in YASM is related to the expand smacro function, which can lead to uncontrolled resource consumption. This can allow a remote attacker to cause a denial of service. The vulnerable component ...
SUSE CVE-2020-21686
A stack-use-after-scope issue discovered in expandmmacparams function in preproc.c in nasm before 2.15.04 allows remote attackers to cause a denial of service via crafted asm file...
Nasm security vulnerabilities
Nasm is an open source programming tool software by The Nasm Development Team team. A security vulnerability previously existed in nasm version 2.15.04, which stemmed from a buffer overflow problem found in the Expandmmacparams function of preproc.c. The vulnerability was caused by the use of the...
PT-2023-11598 · Nasm +2 · Nasm +2
Name of the Vulnerable Software and Affected Versions: nasm versions prior to 2.15.04 Description: A stack-use-after-scope issue was discovered in the expand mmac params function in preproc.c, allowing remote attackers to cause a denial of service via a crafted asm file. This issue affects the na...
3gtel-frontend-platform (1.0.0), @achieve-all/v-element (1.0.0) +294 more potentially affected by CVE-2025-3197 via expand-object (>=0.2.3, <=0.4.2)
expand-object NPM version =0.2.3, =0.1.1, =1.0.0, =1.0.0, =2.0.0, =2.0.7, =0.1.0, =1.0.0, =1.0.8, =0.1.2, =1.0.3, =6.0.0-rc1, =1.0.0, =1.0.8 and more Source cves: CVE-2025-3197 Source advisory: SNYK:JS-EXPANDOBJECT-5821390...
Prototype Pollution
Overview expand-object is an Expand a string into a JavaScript object using a simple notation. Use the CLI or as a node.js lib. Affected versions of this package are vulnerable to Prototype Pollution in the expand function in index.js. This function expands the given string into an object and...
Denial of Service (DoS)
Overview Affected versions of this package are vulnerable to Denial of Service DoS due to a segmentation violation via the expandmmacparams function in the /nasm/nasm-pp.c file. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended...
SUSE CVE-2023-31973
yasm v1.3.0 was discovered to contain a use after free via the function expandmmacparams at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy...
AZL-35390 CVE-2023-31723 affecting package yasm 1.3.0-17
yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function expandmmacparams at /nasm/nasm-pp.c...
AZL-26739 CVE-2023-31723 affecting package yasm 1.3.0-17
yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function expandmmacparams at /nasm/nasm-pp.c...
DEBIAN-CVE-2023-31725
yasm 1.3.0.55.g101bc was discovered to contain a heap-use-after-free via the function expandmmacparams at yasm/modules/preprocs/nasm/nasm-pp.c...
DEBIAN-CVE-2023-31723
yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function expandmmacparams at /nasm/nasm-pp.c...
UBUNTU-CVE-2023-31723
yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function expandmmacparams at /nasm/nasm-pp.c...
