An issue was discovered in yasm version 1.3.0. There is a use-after-free in yasm_intnum_destroy() in libyasm/intnum.c.

...

Use After Free

Overview Affected versions of this package are vulnerable to Use After Free in the yasmintnumdestroy function in libyasm/intnum.c. Remediation There is no fixed version for yasm. References - GitHub Gist - GitHub Issue Credit: Clingto...

PT-2022-10257

Name of the Vulnerable Software and Affected Versions yasm version 1.3.0 Description An issue was discovered in the yasm software, specifically a use-after-free in the yasm intnum destroy function located in libyasm/intnum.c. Recommendations For yasm version 1.3.0, consider restricting access to...