CVE-2021-33454

CVE-2021-33454 – Summary . A NULL pointer dereference exists in yasm 1.3.0 (libyasm/expr.c: yasm_expr_get_intnum). This affects yasm 1.3.0 and is described across multiple security advisories. Impact: according to the CVSS data, local access with low attack complexity, no privileges required, but...

CVE-2021-33463

CVE-2021-33463 affects yasm 1.3.0. The issue is a NULL pointer dereference in libyasm/expr.c, function yasm_expr__copy_except(). CVSS v3.1 vectors (AL:Local, AC:Low, PR:None, UI:Required, S:Unchanged) indicate a MEDIUM base score with Availability impact, and no confidentiality/integrity impact. ...

CVE-2021-33457

CVE-2021-33457 affects yasm 1.3.0, with a NULL pointer dereference in expand_mmac_params() (modules/preprocs/nasm/nasm-pp.c). The CVE is documented in multiple sources; NVD CVSSv3.1 vector indicates a Local, Low-To-None privileges requirement with User Interaction, resulting in a Medium impact on...

CVE-2021-33458

CVE-2021-33458 affects yasm 1.3.0, with a NULL pointer dereference in find_cc() within modules/preprocs/nasm/nasm-pp.c. Documents consistently describe a NULL pointer dereference vulnerability in this function, leading to an availability impact (per NVD metrics: Availability High; others N/C). Th...

CVE-2021-33461

CVE-2021-33461 affects yasm 1.3.0; the issue is a use-after-free in yasm_intnum_destroy() in libyasm/intnum.c. This is a local, low-complexity issue with a MEDIUM base score (5.5) and HIGH availability impact per CVSS, per NVD metrics. There are no explicit exploit details or patches named in the...

CVE-2021-33459

CVE-2021-33459 concerns yasm 1.3.0, with a NULL pointer dereference in nasm_parser_directive() (modules/parsers/nasm/nasm-parse.c). Vulnerable component: yasm (nasM parsing code). Impact per NVD metrics: CVSSv3.1 base score 5.5 (Medium); attack vector: Local; permissions required: None; user inte...

CVE-2021-33460

CVE-2021-33460 affects yasm 1.3.0. The issue is a NULL pointer dereference in if_condition() within modules/preprocs/nasm/nasm-pp.c. Claimed impact: availability (High); confidentiality and integrity not affected. Access is LOCAL with LOW attack complexity and no privileges required, but user int...

CVE-2021-33468

CVE-2021-33468 affects yasm 1.3.0. The issue is a use-after-free in the error() function within modules/preprocs/nasm/nasm-pp.c. This is documented across multiple sources (NVD, CNVD, Alpine, Debian, etc.), all attributing a use-after-free vulnerability in that code path. The provided data does n...

CVE-2021-33455

CVE-2021-33455 affects the yasm project, specifically version 1.3.0. The root cause is a NULL pointer dereference in do_directive() from modules/preprocs/nasm/nasm-pp.c. According to sources in the connected documents, the vulnerability can impact availability (CVE/NVD metrics show Availability I...

CVE-2021-33466

CVE-2021-33466 affects yasm 1.3.0, caused by a NULL pointer dereference in expand_smacro() (modules/preprocs/nasm/nasm-pp.c). Reported impact includes potential denial of service with a HIGH availability impact, requiring local access and some user interaction. Public details across sources consi...

CVE-2021-33456

CVE-2021-33456 affects yasm 1.3.0. The vulnerability is a NULL pointer dereference in hash() within modules/preprocs/nasm/nasm-pp.c. Some sources (e.g., CNVD) describe it as a denial of service issue; CVSS metrics (NVD) assign MEDIUM severity with LOCAL attack vector and HIGH availability impact....

CVE-2021-33467

CVE-2021-33467 affects yasm 1.3.0. The issue is a use-after-free in the function pp_getline() within modules/preprocs/nasm/nasm-pp.c. The NVD entry lists a CVSSv3.1 base score of 5.5 (Medium) with Local attack vector, no privileges required, user interaction required, and high availability impact...

CVE-2021-33464

CVE-2021-33464 affects yasm 1.3.0. The issue is a heap-buffer-overflow in inc_fopen() within modules/preprocs/nasm/nasm-pp.c. Per the CVSS data, the vulnerability has LOCAL attack vector, LOW attack complexity, no privileges required, but requires user interaction; confidentiality/integrity are n...

CVE-2021-33462

CVE-2021-33462 affects yasm 1.3.0; the issue is a use-after-free in libyasm/expr.c (expr_traverse_nodes_post). Exploitation could lead to denial of service; CVSSv3.1 indicates local, no privileges required, user interaction, with availability impact HIGH. Several sources note no patch is currentl...

CVE-2021-33465

The CVE-2021-33465 issue affects yasm v1.3.0. It is a vulnerability in the preprocessor path (expand_mmacro() in modules/preprocs/nasm/nasm-pp.c) that causes a NULL pointer dereference. This is documented with a Local attack vector, Low attack complexity, No privileges required, and User interact...

CVE-2023-31974

CVE-2023-31974 concerns yasm v1.3.0 with a use-after-free in the error handling path (/nasm/nasm-pp.c). The vulnerability status is disputed by third parties as per the description, but connected documents consistently identify a use-after-free issue that could affect local exploitation with high...

CVE-2023-31973

CVE-2023-31973 affects yasm v1.3.0 with a use-after-free in expand_mmac_params() in nasm/nasm-pp.c. The vulnerability is disputed by third parties as a bug rather than a security flaw per YASM policy. NVD metrics show CVSS v3.1 base scores: 5.5 (MEDIUM) with LOCAL/LOW complexity, and UI-required;...

CVE-2023-31972

CVE-2023-31972 affects yasm v1.3.0 with a use-after-free in pp_getline (nasm-pp.c). The issue is described as a use-after-free vulnerability; however, multiple third parties dispute this as a bug per YASM security policy. No exploitation details, affected versions beyond v1.3.0, or validated reme...

CVE-2023-51258

CVE-2023-51258 affects YASM before patched releases; the vulnerability is a memory leak in YASM v.1.3.0 that can allow a local attacker to cause a denial of service via the nasm-pp:1512 new_Token path. Connected documents indicate affected distributions use versions older than patched releases (e...