CVE-2023-31973

2023-05-0900:00:00

mitre

github.com

use after free

yasm v1.3.0

function expand_mmac_params

nasm-pp.c

vulnerability

yasm security policy

AI Score

7.5

Confidence

High

EPSS

Percentile

12.7%

SSVC

Exploitation

poc

Automatable

Technical Impact

total

JSON

yasm v1.3.0 was discovered to contain a use after free via the function expand_mmac_params at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:tortall:yasm:1.3.0:*:*:*:*:*:*:*"
    ],
    "vendor": "tortall",
    "product": "yasm",
    "versions": [
      {
        "status": "affected",
        "version": "1.3.0"
      }
    ],
    "defaultStatus": "affected"
  }
]