Priority MEDIUM 64
An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the yasm_section_bcs_first function in the libyasm/section.c component.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00432 · Published 2024-01-02 · No fix listed CWE-400
Priority MEDIUM 61
yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the function parse_expr5 at /nasm/nasm-parse.c.
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00287 · Published 2023-04-24 · No fix listed CWE-121
Priority MEDIUM 58
An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expand_mmac_params function in the modules/preprocs/nasm/nasm-pp.c component.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00382 · Published 2024-01-02 · No fix listed
Priority MEDIUM 58
Buffer Overflow vulnerability in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expr_delete_term function in the libyasm/expr.c component.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00416 · Published 2024-01-02 · No fix listed CWE-120
Priority MEDIUM 58
An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expand_smacro function in the modules/preprocs/nasm/nasm-pp.c component.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00378 · Published 2024-01-02 · No fix listed CWE-400
Priority MEDIUM 58
Use After Free vulnerability in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the do_directive function in the modules/preprocs/nasm/nasm-pp.c component.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00398 · Published 2024-01-02 · No fix listed CWE-416
Priority MEDIUM 58
Yasm v1.3.0.78 was found prone to NULL Pointer Dereference in /libyasm/intnum.c and /elf/elf.c, which allows the attacker to cause a denial of service via a crafted file.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.0037 · Published 2023-07-26 · Will not fix CWE-476
Priority MEDIUM 58
yasm 1.3.0.55.g101bc has a segmentation violation in the function delete_Token at modules/preprocs/nasm/nasm-pp.c.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00339 · Published 2023-04-12 · No fix listed
Priority MEDIUM 58
yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the component yasm_expr_create at /libyasm/expr.c.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00312 · Published 2023-04-12 · No fix listed CWE-653
Priority MEDIUM 55
yasm commit 9defefae was discovered to contain a NULL pointer dereference via the yasm_section_bcs_append function at section.c.
CVSS 3.1MEDIUM 4.8· Network · No auth · No interaction · EPSS 0.0027 · Published 2025-05-29 · Fix deferred CWE-476
Priority MEDIUM 49
yasm v1.3.0 was discovered to contain a memory leak via the function yasm_intnum_copy at /libyasm/intnum.c.
CVSS 3.1LOW 3.3· Local · No auth · User interaction · EPSS 0.00467 · Published 2023-05-09 · No fix listed CWE-401
Priority LOW 36
yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function do_directive at /nasm/nasm-pp.c.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00329 · Published 2023-05-17 · No fix listed
Priority LOW 25
yasm 1.3.0.55.g101bc was discovered to contain a heap-use-after-free via the function expand_mmac_params at yasm/modules/preprocs/nasm/nasm-pp.c.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00287 · Published 2023-05-17 · No fix listed CWE-416
Priority LOW 25
yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function expand_mmac_params at /nasm/nasm-pp.c.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00288 · Published 2023-05-17 · No fix listed
Priority LOW 25
YASM v1.3.0 was discovered to contain a heap overflow via the function handle_dot_label at /nasm/nasm-token.re.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00291 · Published 2023-04-25 · No fix listed CWE-787
Priority LOW 25
yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the function parse_expr1 at /nasm/nasm-parse.c.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00345 · Published 2023-04-24 · No fix listed CWE-787
Priority LOW 25
yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the component yasm/yasm+0x43b466 in vsprintf.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00302 · Published 2023-04-24 · No fix listed CWE-787