CVE-2023-31975

CVE-2023-31975 covers a memory-leak issue in yasm v1.3.0, specifically in yasm_intnum_copy at /libyasm/intnum.c. Multiple sources note dispute whether this is a vulnerability per YASM policy. Connected advisories indicate security updates/patches exist (e.g., yasm upgrades to a patched package su...

CVE-2023-31724

CVE-2023-31724 affects yasm 1.3.0.55.g101bc, with a segmentation violation in do_directive (nasm-pp.c). Impact is high (local access, user interaction required per CVSS data), with no vendor patch available for yasm according to the connected Nessus record. Recommend monitoring for updates; no pa...

CVE-2024-22653

The yasm assembler contains a NULL pointer dereference vulnerability in the yasm_section_bcs_append function within section.c, specifically identified in commit 9defefae . This issue affects various Linux distributions including TencentOS Server 4 , Unity Linux 20 , CBL Mariner 2.0 , and Azure Li...

CVE-2023-29581

CVE-2023-29581 affects yasm 1.3.0.55.g101bc; a segmentation violation occurs in the delete_Token function of nasm-pp.c. The issue could make a libyasm-based application unavailable, but vendor positions indicate no security relevance due to expected input validation or sandboxing. Connected sourc...

CVE-2023-49557

CVE-2023-49557 affects YASM 1.3.0.86.g9def, exposing a denial of service via libyasm/section.c (yasm_section_bcs_first). CVSS: LOCAL, user interaction required; impact: availability loss. Connected PT-2024-2670 notes the vulnerable area is expand mmac params in nasm/nasm-pp.c and suggests a tempo...

CVE-2023-49555

CVE-2023-49555 affects YASM 1.3.0.86.g9def. The vulnerability resides in the NASM preprocessing path, expand_smacro in modules/preprocs/nasm/nasm-pp.c, and is described as allowing a denial of service. The CVE shows a Medium base score (5.5) with availability impact (A) High, and an attack vector...

CVE-2023-49556

CVE-2023-49556 describes a buffer overflow in YASM 1.3.0.86.g9def, exploitable via the expr_delete_term function in the libyasm/expr.c component. The vulnerability can allow a remote attacker to cause a denial of service. The provided connected documents confirm the affected product/version and t...

CVE-2023-29582

CVE-2023-29582 concerns a stack overflow in yasm 1.3.0.55.g101bc triggered by the function parse_expr1 in /nasm/nasm-parse.c. The issue is explicitly described across multiple feeds as a stack overflow arising from the parse_expr1 path; several sources note that some third parties dispute this as...

CVE-2023-30402

CVE-2023-30402 concerns YASM v1.3.0, where a heap overflow was reported in handle_dot_label within /nasm/nasm-token.re. The issue is documented as a heap overflow, with median CVSS-like metrics indicating LOCAL attack vector, LOW privileges, user interaction required, and HIGH impact on availabil...

CVE-2023-29579

CVE-2023-29579 describes a stack overflow in yasm 1.3.0.55.g101bc via the component yasm/yasm+0x43b466 in vsprintf. Multiple connected sources confirm this technical detail, noting disputes that this may not be a security issue since yasm is a standalone program not designed for untrusted input. ...

CVE-2023-37732

CVE-2023-37732 affects Yasm ; vulnerable component is the assembler library where a NULL pointer dereference in libyasm/intnum.c and /elf/elf.c enables a denial of service with a crafted file (version v1.3.0.78 ). Exploitation is described as a local vector with user interaction, per CVSS data. S...

CVE-2023-29583

Vulnerability details confirm CVE-2023-29583 affects yasm in version 1.3.0.55.g101bc, with a stack overflow in the parse_expr5 function located in nasm/nasm-parse.c. The issue has been disputed by third parties as potentially non-security related since yasm is a standalone program not designed to...

CVE-2023-49554

CVE-2023-49554 concerns YASM, specifically version 1.3.0.86.g9def, where a Use After Free in the do_directive path of modules/preprocs/nasm/nasm-pp.c can lead to denial of service. The vulnerability is described with local attack vector, low complexity, with user interaction required, and an avai...

CVE-2023-49558

CVE-2023-49558 affects YASM 1.3.0.86.g9def and is caused by the expand_mmac_params function in modules/preprocs/nasm/nasm-pp.c, which can lead to a denial of service. The vulnerability is documented across multiple sources (NVD, MSRC, OSV, Debian OSV, Ubuntu OSV, CVE listing) with the REPORTED im...

CVE-2023-31723

This CVE affects yasm 1.3.0.55.g101bc, where a segmentation fault occurs in the function expand_mmac_params in nasm/nasm-pp.c. The vulnerability is described across multiple sources (NVD, OSV, Nessus, PT-SEC) as a local issue with a high impact on availability (CVSS v3.1: AV:L/AC:L/PR:N/UI:R/S:U/...

CVE-2023-29580

CVE-2023-29580 affects yasm version 1.3.0.55.g101bc, where a segmentation violation is triggered by the function yasm_expr_create in /libyasm/expr.c. The vulnerability is described across multiple feeds as a segmentation fault with local access, low attack complexity, required user interaction, a...

CVE-2023-31725

Summary (CVE-2023-31725): yasm version 1.3.0.55.g101bc contains a heap-use-after-free via expand_mmac_params in yasm/modules/preprocs/nasm/nasm-pp.c. Affected component is the yasm assembler (preprocessor for NASM). Impact as per CVSS: local access with high impact on availability; no confidentia...