CVE-2023-31972

yasm v1.3.0 was discovered to contain a use after free via the function ppgetline at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy...

CVE-2023-31974

yasm v1.3.0 was discovered to contain a use after free via the function error at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy...

PT-2023-23547 · Yasm +1 · Yasm +1

Name of the Vulnerable Software and Affected Versions: yasm version 1.3.0 Description: A use after free issue was discovered in the pp getline function at /nasm/nasm-pp.c. Note that multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy...

PT-2023-23548 · Yasm +1 · Yasm +1

Name of the Vulnerable Software and Affected Versions: yasm version 1.3.0 Description: The issue is related to a use after free via the function expand mmac params at /nasm/nasm-pp.c. Note that multiple third parties dispute this as a bug and not a vulnerability according to the YASM security...

yasm 安全漏洞

yasm is a completely rewritten Netwide assembler from the yasm open source. A security vulnerability exists in yasm version v1.3.0, which stems from a post-release reuse issue in the function expandmmacparams in /nasm/nasm-pp.c. The vulnerability is caused by the use of the function...

CVE-2023-31972

yasm v1.3.0 was discovered to contain a use after free via the function ppgetline at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy...

CVE-2023-31973

CVE-2023-31973 affects yasm v1.3.0 with a use-after-free in expand_mmac_params() in nasm/nasm-pp.c. The vulnerability is disputed by third parties as a bug rather than a security flaw per YASM policy. NVD metrics show CVSS v3.1 base scores: 5.5 (MEDIUM) with LOCAL/LOW complexity, and UI-required;...

CVE-2023-31974

CVE-2023-31974 concerns yasm v1.3.0 with a use-after-free in the error handling path (/nasm/nasm-pp.c). The vulnerability status is disputed by third parties as per the description, but connected documents consistently identify a use-after-free issue that could affect local exploitation with high...

CVE-2023-31974

yasm v1.3.0 was discovered to contain a use after free via the function error at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy...

CVE-2023-31972

CVE-2023-31972 affects yasm v1.3.0 with a use-after-free in pp_getline (nasm-pp.c). The issue is described as a use-after-free vulnerability; however, multiple third parties dispute this as a bug per YASM security policy. No exploitation details, affected versions beyond v1.3.0, or validated reme...

CVE-2023-31975

yasm v1.3.0 was discovered to contain a memory leak via the function yasmintnumcopy at /libyasm/intnum.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy...

Buffer Overflow

Overview Affected versions of this package are vulnerable to Buffer Overflow via the function parseexpr1. Remediation There is no fixed version for yasm. References - GitHub Issue - PoC Credit: z1r00...

SUSE CVE-2023-30402

YASM v1.3.0 was discovered to contain a heap overflow via the function handledotlabel at /nasm/nasm-token.re. Note: This has been disputed by third parties who argue this is a bug and not a security issue because yasm is a standalone program not designed to run untrusted code...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the handledotlabel function at /nasm/nasm-token.re. Remediation There is no fixed version for yasm. References - GitHub Issue Credit: randomssr...

SUSE CVE-2023-29579

yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the component yasm/yasm+0x43b466 in vsprintf. Note: This has been disputed by third parties who argue this is a bug and not a security issue because yasm is a standalone program not designed to run untrusted code...

SUSE CVE-2023-29583

yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the function parseexpr5 at /nasm/nasm-parse.c. Note: This has been disputed by third parties who argue this is a bug and not a security issue because yasm is a standalone program not designed to run untrusted code...

SUSE CVE-2023-29582

yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the function parseexpr1 at /nasm/nasm-parse.c. Note: This has been disputed by third parties who argue this is a bug and not a security issue because yasm is a standalone program not designed to run untrusted code...

CVE-2023-30402

YASM v1.3.0 was discovered to contain a heap overflow via the function handledotlabel at /nasm/nasm-token.re. Note: This has been disputed by third parties who argue this is a bug and not a security issue because yasm is a standalone program not designed to run untrusted code...

AZL-26359 CVE-2023-30402 affecting package yasm 1.3.0-17

YASM v1.3.0 was discovered to contain a heap overflow via the function handledotlabel at /nasm/nasm-token.re. Note: This has been disputed by third parties who argue this is a bug and not a security issue because yasm is a standalone program not designed to run untrusted code...

CVE-2023-30402

YASM v1.3.0 was discovered to contain a heap overflow via the function handledotlabel at /nasm/nasm-token.re. Note: This has been disputed by third parties who argue this is a bug and not a security issue because yasm is a standalone program not designed to run untrusted code...