Vulnerabilities > Nasm

DATE CVE VULNERABILITY TITLE RISK
2017-12-21 CVE-2017-17810 Improper Input Validation vulnerability in multiple products
In Netwide Assembler (NASM) 2.14rc0, there is a "SEGV on unknown address" that will cause a remote denial of service attack, because asm/preproc.c mishandles macro calls that have the wrong number of arguments.
local
low complexity
nasm canonical CWE-20
5.5
2017-09-09 CVE-2017-14228 NULL Pointer Dereference vulnerability in multiple products
In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function paste_tokens() in preproc.c, aka a NULL pointer dereference.
local
low complexity
nasm canonical CWE-476
5.5
2017-07-08 CVE-2017-11111 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
In Netwide Assembler (NASM) 2.14rc0, preproc.c allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.
local
low complexity
nasm canonical CWE-119
7.8
2017-06-29 CVE-2017-10686 Use After Free vulnerability in multiple products
In Netwide Assembler (NASM) 2.14rc0, there are multiple heap use after free vulnerabilities in the tool nasm.
local
low complexity
nasm canonical CWE-416
7.8