PT-2025-23164 · Yasm +2 · Yasm +2

Name of the Vulnerable Software and Affected Versions: yasm version 9defefae Description: A NULL pointer dereference was discovered via the yasm section bcs append function at section.c. Recommendations: For version 9defefae, consider disabling the yasm section bcs append function as a temporary...

CVE-2023-37732

Yasm v1.3.0.78 was found prone to NULL Pointer Dereference in /libyasm/intnum.c and /elf/elf.c, which allows the attacker to cause a denial of service via a crafted file...

SUSE CVE-2023-31725

yasm 1.3.0.55.g101bc was discovered to contain a heap-use-after-free via the function expandmmacparams at yasm/modules/preprocs/nasm/nasm-pp.c...

CVE-2023-29582

yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the function parseexpr1 at /nasm/nasm-parse.c. Note: This has been disputed by third parties who argue this is a bug and not a security issue because yasm is a standalone program not designed to run untrusted code...