CVE-2019-19786

CVE-2019-19786 concerns ATasm 1.06, with a stack-based buffer overflow in the parse_expr() function of setparse.c triggered by a crafted .m65 file. The Fedora-related advisories reference multiple ATasm CVEs for the same package (including CVE-2019-19786) and note updates to ATasm (e.g., 1.09) ad...

CVE-2019-19787

CVE-2019-19787 : The ATasm 1.06 vulnerability is a stack-based buffer overflow in the get_signed_expression() function of setparse.c triggered by a crafted .m65 file. The initial description identifies this exact flaw and notes a related set of issues (CVE-2019-19785 and CVE-2019-19786) for other...

CVE-2019-19785

ATasm 1.06 is affected by CVE-2019-19785 due to a stack-based buffer overflow in the to_comma() function (asm.c) triggered by a crafted .m65 file. The issue is confirmed in Fedora advisories referencing CVE-2019-19785 and related CVEs (19786, 19787) with downstream updates in Fedora: ATasm 1.09 p...

CVE-2021-34123

CVE-2021-34123 affects ATasm version 1.09, with a stack-buffer-overflow in function aprintf() in asm.c that lets an attacker execute arbitrary code via a crafted file. Several sources (NVD, Red Hat, PRION, CNNVD, CVE lists) corroborate the same description, including CVSS 3.1 base score 9.8 (Netw...