CVE-2018-19216

Summary: CVE-2018-19216 affects NASM with a use-after-free in detoken (asm/preproc.c). Connected advisories document multiple NASM-related CVEs for NASM versions around 2.13.x/2.14.x and show heap-based/stack-based over-read or under-read in various preprocessor paths (expand_mmac_params, detoken...

CVE-2022-44370

CVE-2022-44370 affects NASM v2.16, with a heap buffer overflow in the quote_for_pmake() function (asm/nasm.c:856). Connected advisories (Gentoo GLSA-202312-09 and EulerOS-SA entries) reference this vulnerability, and vendor advisories suggest upgrading NASM to a fixed release (Gentoo: >=nasm-2...

CVE-2022-29654

CVE-2022-29654 affects NASM; a buffer overflow in the function quote_for_pmake within asm/nasm.c allows denial of service when parsing a crafted file. Affected software: NASM up to version before 2.15.05. Root cause per sources: buffer overflow in quote_for_pmake in nasm.c. Impact: DoS (crash/unu...

CVE-2020-21686

CVE-2020-21686 is a stack-use-after-scope vulnerability in NASM’s preproc.c expand_mmac_params function, present in NASM releases before 2.15.04. It allows remote denial of service via a crafted ASM file. Multiple connected sources corroborate the issue and note a security update; remediation is ...