Vulnerabilities

NASM’s disasm() function contains a stack based buffer overflow when formatting disassembly output, allowing an attacker triggered out-of-bounds write when `slen` exceeds the buffer capacity.

NASM contains a heap use after free vulnerability in response file (-@) processing where a dangling pointer to freed memory is stored in the global depend_file and later dereferenced, as the response-file buffer is freed…

A heap buffer overflow vulnerability exists in the Netwide Assembler (NASM) due to a lack of bounds checking in the obj_directive() function.

A vulnerability has been found in NASM Netwide Assember 2.17rc0.

A vulnerability was identified in NASM Netwide Assember 2.17rc0.

A vulnerability was determined in NASM Netwide Assember 2.17rc0.

A vulnerability was found in NASM Netwide Assember 2.17rc0.

A vulnerability has been found in NASM Netwide Assember 2.17rc0.

Stack-based buffer over-read in disasm in nasm 2.16 allows attackers to cause a denial of service (crash).

Stack-based buffer over-read in function disasm in nasm 2.16 allows attackers to cause a denial of service.

Null pointer dereference in ieee_write_file in nasm 2.16rc0 allows attackers to cause a denial of service (crash).

Buffer overflow vulnerability in quote_for_pmake in asm/nasm.c in nasm before 2.15.05 allows attackers to cause a denial of service via crafted file.

Buffer Overflow vulnerability in scan function in stdscan.c in nasm 2.15rc0 allows remote attackers to cause a denial of service via crafted asm file.

A stack-use-after-scope issue discovered in expand_mmac_params function in preproc.c in nasm before 2.15.04 allows remote attackers to cause a denial of service via crafted asm file.

Buffer Overflow vulnerability in hash_findi function in hashtbl.c in nasm 2.15rc0 allows remote attackers to cause a denial of service via crafted asm file.

A Segmentation Fault issue discovered in in ieee_segment function in outieee.c in nasm 2.14.03 and 2.15 allows remote attackers to cause a denial of service via crafted assembly file.

A Use After Free vulnerability in function new_Token in asm/preproc.c in nasm 2.14.02 allows attackers to cause a denial of service via crafted nasm command.

There exists a heap buffer overflow in nasm 2.16.02rc1 (GitHub commit: b952891).

NASM v2.16 was discovered to contain a heap buffer overflow in the component quote_for_pmake() asm/nasm.c:856

NASM 2.16 (development) is vulnerable to 476: Null Pointer Dereference via output/outaout.c.

NASM v2.16 was discovered to contain a null pointer deference in the NASM component

NASM v2.16 was discovered to contain a segmentation violation in the component ieee_write_file at /output/outieee.c.

NASM v2.16 was discovered to contain a global buffer overflow in the component dbgdbg_typevalue at /output/outdbg.c.

nasm v2.16 was discovered to contain a stack overflow in the Ndisasm component

An issue was discovered in NASM version 2.16rc0.