CVE-2019-14248

Summary: CVE-2019-14248 affects Netwide Assembler (NASM) 2.14.x in the libnasm.a library. The flaw is a NULL pointer dereference in asm/pragma.c (functions: process_pragma, search_pragma_list, nasm_set_limit) when the string "%pragma limit" is mishandled. Impact (per provided metrics): CVSSv2 ind...

CVE-2022-46456

CVE-2022-46456 affects NASM v2.16. The vulnerability is a global buffer overflow in the component dbgdbg_typevalue, in the file /output/outdbg.c. The issue is caused by an overflow in that code path, with potential impact including availability loss (per CVSS: HIGH), and limited confidentiality i...

CVE-2019-20334

CVE-2019-20334 affects NASM 2.14.02 with stack consumption in the eval code paths (asm/eval.c) specifically in the expr# functions (expr, rexp, bexpr, cexpr) and related relationships to expr0–expr6 (and stdscan in asm/stdscan.c). The Microsoft/MSRC entry describes a stack-exhaustion DoS caused b...

CVE-2018-10316

CVE-2018-10316 (NASM) is tied to NASM 2.14rc0 where an endless while loop occurs in the assemble_file function (asm/nasm.c) due to a globallineno integer overflow. The documented impact is a denial of service through a hang/crash of the assembler when processing crafted input. The connected sourc...

CVE-2018-19214

CVE-2018-19214 refers to Netwide Assembler (NASM) with a heap-based buffer over-read in expand_mmac_params (asm/preproc.c) triggered by insufficient input. The detail explicitly mentions NASM 2.14rc15 as the vulnerable version. The connected documents corroborate the CVE entry among NASM-related ...

CVE-2018-16517

CVE-2018-16517 affects NASM: a NULL pointer dereference in asm/labels.c can allow a denial of service via a crafted input file. The vulnerability is documented in multiple advisories and Nessus plugins, and is addressed by NASM 2.14.02+/later patches in several distributions (e.g., openSUSE/SUSE ...

CVE-2018-1000667

CVE-2018-1000667 is referenced in connected content as a memory corruption (crash) in Netwide Assembler (NASM) when handling a crafted file. Specifically, the issue is described in the function assemble_file(inname, depend_ptr) at asm/nasm.c:482, affecting NASM 2.14rc15 and earlier. The vulnerabi...

CVE-2018-8881

CVE-2018-8881 affects Netwide Assembler (NASM) with a heap-based buffer over-read in the tokenize function (asm/preproc.c) caused by an unterminated string. Reported as part of NASM 2.13.02rc2 and related builds; OpenVAS/Nessus entries reiterate this CVE among a broad NASM set. No public remediat...

CVE-2018-19215

CVE-2018-19215 refers to a heap-based buffer over-read in NASM (Netwide Assembler) 2.14rc16. The flaw affects the expand_mmac_params function in asm/preproc.c for the special cases of the %, $, and ! characters. Attack impact described in the connected Red Hat Nessus entries aligns with a remote ...

CVE-2018-10254

CVE-2018-10254 affects Netwide Assembler (NASM) 2.13, with a stack-based buffer over-read in the disasm/disasm.c file. The NVD description states that a crafted ELF file could be used by an attacker to cause a denial of service and potentially other impact. Connected Nessus/OpenVAS entries corrob...

CVE-2018-16999

CVE-2018-16999 affects Netwide Assembler (NASM) up to version 2.14rc15, where an invalid memory write (segmentation fault) in expand_smacro (preproc.c) can cause a denial of service with a crafted input file. Connected advisories corroborate the issue across multiple distributions (openSUSE/Magei...

CVE-2018-8883

CVE-2018-8883 affects Netwide Assembler (NASM) 2.13.02rc2 with a buffer over-read in the parse_line function (asm/parser.c) caused by uncontrolled access to nasm_reg_flags. The provided documents identify the vulnerability; no explicit fix/patch information is given in the sources. Exploitation s...

CVE-2018-19216

Summary: CVE-2018-19216 affects NASM with a use-after-free in detoken (asm/preproc.c). Connected advisories document multiple NASM-related CVEs for NASM versions around 2.13.x/2.14.x and show heap-based/stack-based over-read or under-read in various preprocessor paths (expand_mmac_params, detoken...

CVE-2018-8882

CVE-2018-8882 affects Netwide Assembler (NASM) 2.13.02rc2 and related builds. The vulnerability is a stack-based buffer under-read in ieee_shr (asm/float.c) triggered by a large shift value. Public references in connected documents confirm NASM’s history of multiple NASM-related CVEs, including t...

CVE-2018-10016

CVE-2018-10016 : Netwide Assembler (NASM) 2.14rc0 has a division-by-zero in the expr5 function (asm/eval.c) triggered by a malformed input file. The vulnerability is in NASM’s evaluation path and is described with a CVSS base score of 5.5 (MEDIUM) for a local, low‑complexity to exploit vector. Th...

CVE-2018-16382

CVE-2018-16382 affects Netwide Assembler (NASM) 2.14rc15, with a buffer over-read in x86/regflags.c. The connected Nessus/Red Hat advisories confirm this vulnerability and list CVE-2018-16382 among unpatched/exposed NASM issues, but do not specify a concrete fixed version or patch candidate in th...

CVE-2017-10686

CVE-2017-10686 affects NASM 2.14rc0, with multiple heap use-after-free vulnerabilities in token(), detoken(), and pp_getline() that can corrupt data structures, cause double frees, and trigger out-of-bounds writes. The documented impact includes remote code execution potential, via a compromised ...

CVE-2019-20352

CVE-2019-20352 affects Netwide Assembler (NASM) 2.15rc0 with a heap-based buffer over-read in set_text_free, triggered when expand_one_smacro processes a crafted .asm file (asm/preproc.c). Exploitation could lead to a crash and, per CVSS3.1, high impact on confidentiality and availability (local,...

CVE-2022-46457

CVE-2022-46457 affects NASM, with a concrete issue: a segmentation violation in the ieee_write_file function (outieee.c) observed in NASM v2.16. The CVSS analysis in the initial document indicates Local attack vector, Low attack complexity, no privileges required, but user interaction required, a...

CVE-2021-33452

CVE-2021-33452 impacts NASM 2.16rc0, where the issue is a memory leak in nasm_malloc() inside nasmlib/alloc.c. The available sources describe the vulnerability as a leak, with no explicit exploit details or patched versions in the provided documents. The CVE entry lists the vulnerability and CVSS...

CVE-2017-14228

CVE-2017-14228 affects NASM 2.14rc0, caused by an illegal address access (NULL pointer dereference) in paste_tokens() in asm/preproc.c, enabling remote denial of service. The connected Nessus/RH advisories corroborate NASM preproc.c vulnerabilities around that version family, including multiple r...

CVE-2017-17810

CVE-2017-17810 affects Netwide Assembler (NASM) 2.14rc0. The vulnerability is in asm/preproc.c where macro calls with the wrong number of arguments cause a segmentation fault, enabling a remote denial of service. The provided connected documents corroborate the presence of this CVE among NASM-rel...

CVE-2017-17814

CVE-2017-17814 affects NASM 2.14rc0: a use-after-free in do_directive (asm/preproc.c) may enable a remote denial of service. No other product versions or exploitation details are provided in the connected documents. Remediation/fix details are not specified here.

CVE-2021-45257

CVE-2021-45257 affects nasm 2.16rc0 with an infinite loop in the gpaste_tokens function. The initial description provides no exploit details, vectors, or patch information. Connected Nessus/OSV entries note unpatched status for various Linux distros but do not supply remediation specifics. Public...

CVE-2017-17813

CVE-2017-17813 affects Netwide Assembler (NASM) 2.14rc0, with a use-after-free in pp_list_one_macro in asm/preproc.c that leads to remote denial of service via mishandling of line-syntax errors. The incident is documented across multiple sources in the connected documents (e.g., Nessus/OpenVAS re...

CVE-2017-17812

The CVE-2017-17812 issue affects Netwide Assembler (NASM) 2.14rc0 and is a heap-based buffer over-read in detoken() within asm/preproc.c that can enable remote denial of service. Connected sources confirm this specific vulnerability class and the affected component, with remediation in newer NASM...

CVE-2017-17820

Technical details for CVE-2017-17820 are not publicly provided in the supplied documents. Monitor for updates; the materials reference NASM 2.14rc0 use-after-free but do not disclose affected components, exploit vectors, or fixes.

CVE-2019-7147

CVE-2019-7147 describes a buffer over-read in the function crc64ib in crc64.c of NASM (nasmlib) 2.14rc16. A crafted assembly input can trigger segmentation faults, causing denial of service (DoS). Connected docs confirm the vulnerable component and the DoS impact, but do not provide a patch/versi...

CVE-2017-17811

CVE-2017-17811 affects NASM 2.14rc0, causing a heap-based buffer overflow via strcpy in paste_tokens (asm/preproc.c) and can lead to remote denial of service. Public advisories describe a family of related NASM flaws and note mitigations/updates (e.g., upgrade to NASM >= 2.14.02 in some distri...

CVE-2004-1287

CVE-2004-1287 (and related CVE-2005-1194) describe a buffer overflow in NASM, specifically in the error/preproc path, affecting NASM 0.98.38 1.2 and enabling arbitrary code execution. The vulnerability is documented in multiple advisories (RHSA-2005:381; Debian DSA-623-1; Ubuntu USN-45-1, USN-128...

CVE-2017-11111

NASM 2.14rc0 is affected. The root cause is in asm/preproc.c where a strcpy in paste_tokens leads to a heap-based buffer overflow, enabling remote denial of service (and potentially other impact) when processing crafted input. Related CVEs note a similar heap-based overflow and DoS. Mitigation in...

CVE-2017-17815

CVE-2017-17815 affects NASM 2.14rc0 where an illegal address access in is_mmacro() (asm/preproc.c) can permit a remote denial of service due to a missing check for the relationship between minimum and maximum parameter counts. The description in the Initial document confirms the vulnerability and...

CVE-2017-17816

CVE-2017-17816 affects NASM 2.14rc0. The vulnerability is a use-after-free in pp_getline inside asm/preproc.c, which can enable a remote denial of service. The connected Nessus/OpenVAS entries confirm this CVE is among NASM issues with multiple CVEs, including CVE-2017-17816, and reference a chai...

CVE-2017-17818

NASM 2.14rc0 is affected by CVE-2017-17818 (heap-based buffer over-read in paste_tokens, asm/preproc.c) that can enable a remote denial of service. The issue concerns the paste_tokens path in preproc.c and is documented across multiple advisories (e.g., Red Hat Nessus entries). Remediation is to ...

CVE-2019-6291

CVE-2019-6291 (NASM) affects Netwide Assembler up to 2.14.02. The issue is a stack-exhaustion vulnerability in function expr6() in eval.c caused by recursive calls when parsing lots of '!' '+' or '-' in a crafted asm file, enabling remote denial-of-service. Available sources confirm the vulnerabi...

CVE-2017-17819

CVE-2017-17819 affects Netwide Assembler (NASM) 2.14rc0. The issue is an illegal address access in find_cc() within asm/preproc.c, caused by failure to validate pointers associated with skip_white_ calls. This can enable a remote denial of service attack. The vulnerability is tied to NASM-2.14rc0...

CVE-2019-6290

CVE-2019-6290 affects Netwide Assembler (NASM) up to version 2.14.02. The vulnerability is an infinite recursion/stack exhaustion in eval.c (functions expr, rexp, bexpr, cexpr) triggered in scenarios with many '{' characters, allowing a remote attacker to cause a denial-of-service via a crafted A...

CVE-2020-21528

CVE-2020-21528 is a NASM segmentation fault in ieee_segment (outieee.c) that allows denial of service via a crafted assembly file. Affected products/versions cited in connected docs include NASM 2.14.03 and 2.15. Upstream/OS advisories recommend upgrading to NASM 2.16.01 or newer to remediate (e....

CVE-2021-33450

CVE-2021-33450 affects NASM 2.16rc0. The connected documents confirm a vulnerability in nasm_calloc() in nasmlib/alloc.c, described as memory leaks. The NVD entry lists CVSS-3.1 metrics: Local attack vector, Low attack complexity, No privileges required, User interaction required, and a base scor...

CVE-2017-17817

CVE-2017-17817 affects Netwide Assembler (NASM) 2.14rc0. The vulnerability is a use-after-free in pp_verror() within asm/preproc.c, which can lead to a remote denial of service. The available connected sources consistently describe this issue as part of NASM’s 2.14rc0 preprocessor handling (pp_ve...

CVE-2018-19755

NASM 2.14rc16 contains an illegal address access in asm/preproc.c (is_mmacro) that can lead to a denial of service via out-of-bounds array access. This CVE-2018-19755 entry is referenced in Astra Linux security bulletin describing the same issue. The provided documents do not include a vendor pat...

CVE-2018-20538

CVE-2018-20538 describes a use-after-free in NASM 2.14rc16 at asm/preproc.c (function pp_getline) that can cause a denial of service during certain finishes tests. The vulnerability is tied to a use-after-free in pp_getline, leading to a potential crash or DoS when processing crafted inputs in th...

CVE-2019-8343

CVE-2019-8343 affects NASM 2.14.02, with a use-after-free in paste_tokens (asm/preproc.c). Public docs confirm the NASM issue and link it to unpatched/legacy deployments (e.g., Gentoo GLSA 202312-09 notes upgrading to NASM >= 2.16.01). Impact details in sources describe potential denial of ser...

CVE-2020-18974

CVE-2020-18974 affects Netwide Assembler (NASM) — specifically NASM v2.15.x — where a Buffer Overflow in nasmlib/crc64 (crc64i) can cause a denial of service. The issue is distinct from CVE-2019-7147. The available connected sources identify the vulnerable component as nasmlib/crc64 and reference...

CVE-2008-2719

CVE-2008-2719 affects Netwide Assembler (NASM) 2.02. The off-by-one error in the ppscan function (preproc.c) can cause a stack-based buffer overflow, leading to a denial of service and potentially arbitrary code execution via a crafted input file. Public references in Mandriva and related advisor...

CVE-2018-1000886

CVE-2018-1000886 affects NASM versions 2.14.01rc5 and 2.15, with a buffer overflow in asm/stdscan.c:130 caused by endless macro generation. This can crash the NASM process and is exploitable via a crafted input file. Public documents in the connected set identify affected platforms (e.g., Red Hat...

CVE-2022-44369

CVE-2022-44369 affects NASM 2.16 (development). The root cause is a null pointer dereference in output/outaout.c (aout_add_gotoff_reloc()), which can crash the application and cause denial of service. Impact per the entry indicates local access is required and the attacker can trigger a crash, wi...

CVE-2022-44370

CVE-2022-44370 affects NASM v2.16, with a heap buffer overflow in the quote_for_pmake() function (asm/nasm.c:856). Connected advisories (Gentoo GLSA-202312-09 and EulerOS-SA entries) reference this vulnerability, and vendor advisories suggest upgrading NASM to a fixed release (Gentoo: >=nasm-2...

CVE-2018-20535

The CVE-2018-20535 entry concerns Netwide Assembler (NASM) with a use-after-free in asm/preproc.c (pp_getline) in NASM 2.14rc16, which the documentation states will cause a denial of service during a line-number increment. Connected sources (Astra Linux security bulletin) corroborate a NASM use-a...

CVE-2023-31722

There is a documented CVE-2023-31722 heap buffer overflow in NASM around version 2.16.02rc1 (GitHub commit b952891). The connected OSV/Red Hat/DEBIAN/UBUNTU entries confirm a NASM security update addressing this issue; the vulnerability is described as a heap-based overflow affecting NASM’s expan...