CVE-2023-29583

2023-04-2400:00:00

mitre

github.com

yasm stack overflow security

AI Score

7.9

Confidence

High

EPSS

0.001

Percentile

30.6%

SSVC

Exploitation

poc

Automatable

Technical Impact

partial

JSON

yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the function parse_expr5 at /nasm/nasm-parse.c. Note: This has been disputed by third parties who argue this is a bug and not a security issue because yasm is a standalone program not designed to run untrusted code.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:yasm_project:yasm:1.3.0.55.g101bc:*:*:*:*:*:*:*"
    ],
    "vendor": "yasm_project",
    "product": "yasm",
    "versions": [
      {
        "status": "affected",
        "version": "1.3.0.55.g101bc"
      }
    ],
    "defaultStatus": "unknown"
  }
]