45 matches found
JLSEC-2026-591
An issue was discovered in yasm version 1.3.0. There is a use-after-free in yasmintnumdestroy in libyasm/intnum.c...
JLSEC-2026-584
An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in yasmexprgetintnum in libyasm/expr.c...
JLSEC-2026-594
An issue was discovered in yasm version 1.3.0. There is a heap-buffer-overflow in incfopen in modules/preprocs/nasm/nasm-pp.c...
JLSEC-2026-592
An issue was discovered in yasm version 1.3.0. There is a use-after-free in exprtraversenodespost in libyasm/expr.c...
JLSEC-2026-589
An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in nasmparserdirective in modules/parsers/nasm/nasm-parse.c...
Advisory ROSA-SA-2026-3310
CVE-ID: CVE-2021-33454 BDU-ID: None CVE-Crit: Medium CVE-DESCRIPTION: Vulnerability related to the pointer manipulation in yasm version 1.3.0, within the function yasmexprgetintnum in libyasm/expr.c. CVE-STATUS: The vulnerability has been fixed. CVE-REVIEW: To address this vulnerability, execute...
An issue was discovered in yasm version 1.3.0. There is a use-after-free in error() in modules/preprocs/nasm/nasm-pp.c.
...
An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in nasm_parser_directive() in modules/parsers/nasm/nasm-parse.c.
...
Linux Distros Unpatched Vulnerability : CVE-2021-33465
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in expandmmacro in modules/preprocs/nasm/nasm-pp.c. CVE-2021-33465 Note that...
Linux Distros Unpatched Vulnerability : CVE-2023-31975
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - yasm v1.3.0 was discovered to contain a memory leak via the function yasmintnumcopy at /libyasm/intnum.c. Note: Multiple third parties dispute this as a bug and...
Linux Distros Unpatched Vulnerability : CVE-2021-33458
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in findcc in modules/preprocs/nasm/nasm-pp.c. CVE-2021-33458 Note that Nessus...
Linux Distros Unpatched Vulnerability : CVE-2021-33456
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in hash in modules/preprocs/nasm/nasm-pp.c. CVE-2021-33456 Note that Nessus...
Linux Distros Unpatched Vulnerability : CVE-2021-33466
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in expandsmacro in modules/preprocs/nasm/nasm-pp.c. CVE-2021-33466 Note that...
Linux Distros Unpatched Vulnerability : CVE-2021-33460
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in ifcondition in modules/preprocs/nasm/nasm-pp.c. CVE-2021-33460 Note that...
CVE-2021-33460 affecting package yasm 1.3.0-17
CVE-2021-33460 affecting package yasm 1.3.0-17. No patch is available currently...
CVE-2021-33457 affecting package yasm 1.3.0-14
CVE-2021-33457 affecting package yasm 1.3.0-14. No patch is available currently...
PT-2024-14080
Name of the Vulnerable Software and Affected Versions YASM version 1.3.0 Description A memory leak issue allows a local attacker to cause a denial of service via the new Token function in the modules/preprocs/nasm/nasm-pp file. Recommendations For YASM version 1.3.0, as a temporary workaround,...
AZL-35385 CVE-2023-31724 affecting package yasm 1.3.0-17
yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function dodirective at /nasm/nasm-pp.c...
AZL-35391 CVE-2023-31725 affecting package yasm 1.3.0-17
yasm 1.3.0.55.g101bc was discovered to contain a heap-use-after-free via the function expandmmacparams at yasm/modules/preprocs/nasm/nasm-pp.c...
AZL-35382 CVE-2023-31974 affecting package yasm 1.3.0-17
yasm v1.3.0 was discovered to contain a use after free via the function error at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy...