Product:

Netwide_assembler

(Nasm)
Repositories

Unknown:

This might be proprietary software.
#Vulnerabilities 67
Date Id Summary Products Score Patch Annotated
2005-01-10 CVE-2004-1287 Buffer overflow in the error function in preproc.c for NASM 0.98.38 1.2 allows attackers to execute arbitrary code via a crafted asm file, a different vulnerability than CVE-2005-1194. Netwide_assembler N/A
2019-02-15 CVE-2019-8343 In Netwide Assembler (NASM) 2.14.02, there is a use-after-free in paste_tokens in asm/preproc.c. Netwide_assembler 7.8
2023-03-29 CVE-2022-44370 NASM v2.16 was discovered to contain a heap buffer overflow in the component quote_for_pmake() asm/nasm.c:856 Netwide_assembler 7.8
2023-08-22 CVE-2020-21528 A Segmentation Fault issue discovered in in ieee_segment function in outieee.c in nasm 2.14.03 and 2.15 allows remote attackers to cause a denial of service via crafted assembly file. Netwide_assembler 5.5
2008-06-16 CVE-2008-2719 Off-by-one error in the ppscan function (preproc.c) in Netwide Assembler (NASM) 2.02 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted file that triggers a stack-based buffer overflow. Netwide_assembler N/A
2023-08-22 CVE-2023-38667 Stack-based buffer over-read in function disasm in nasm 2.16 allows attackers to cause a denial of service. Netwide_assembler 5.5
2023-08-22 CVE-2023-38668 Stack-based buffer over-read in disasm in nasm 2.16 allows attackers to cause a denial of service (crash). Netwide_assembler 5.5
2023-08-22 CVE-2020-18780 A Use After Free vulnerability in function new_Token in asm/preproc.c in nasm 2.14.02 allows attackers to cause a denial of service via crafted nasm command. Netwide_assembler 5.5
2023-08-22 CVE-2020-21686 A stack-use-after-scope issue discovered in expand_mmac_params function in preproc.c in nasm before 2.15.04 allows remote attackers to cause a denial of service via crafted asm file. Netwide_assembler 5.5
2023-08-22 CVE-2023-38665 Null pointer dereference in ieee_write_file in nasm 2.16rc0 allows attackers to cause a denial of service (crash). Netwide_assembler 5.5