CVE-2026-6069 | High | 7.5 | 2026-04-10 | NASM’s disasm() function contains a stack based buffer overflow when formatting disassembly output, allowing an attacker triggered out-of-bounds write when `sl… |
CVE-2026-6068 | Critical | 9.6 | 2026-04-10 | NASM contains a heap use after free vulnerability in response file (-@) processing where a dangling pointer to freed memory is stored in the global depend_file… |
CVE-2026-6067 | Medium | 5.5 | 2026-04-10 | A heap buffer overflow vulnerability exists in the Netwide Assembler (NASM) due to a lack of bounds checking in the obj_directive() function. This vulnerabilit… |
CVE-2025-8846 | Medium | 5.3 | 2025-08-11 | A vulnerability has been found in NASM Netwide Assember 2.17rc0. Affected is the function parse_line of the file parser.c. The manipulation leads to stack-base… |
CVE-2025-8845 | Medium | 5.3 | 2025-08-11 | A vulnerability was identified in NASM Netwide Assember 2.17rc0. This issue affects the function assemble_file of the file nasm.c. The manipulation leads to st… |
CVE-2025-8844 | Low | 3.3 | 2025-08-11 | A vulnerability was determined in NASM Netwide Assember 2.17rc0. This vulnerability affects the function parse_smacro_template of the file preproc.c. The manip… |
CVE-2025-8843 | Medium | 5.3 | 2025-08-11 | A vulnerability was found in NASM Netwide Assember 2.17rc0. This affects the function macho_no_dead_strip of the file outmacho.c. The manipulation leads to hea… |
CVE-2025-8842 | Medium | 5.3 | 2025-08-11 | A vulnerability has been found in NASM Netwide Assember 2.17rc0. Affected by this issue is the function do_directive of the file preproc.c. The manipulation le… |
CVE-2023-38668 | Medium | 5.5 | 2023-08-22 | Stack-based buffer over-read in disasm in nasm 2.16 allows attackers to cause a denial of service (crash). |
CVE-2023-38667 | Medium | 5.5 | 2023-08-22 | Stack-based buffer over-read in function disasm in nasm 2.16 allows attackers to cause a denial of service. |
CVE-2023-38665 | Medium | 5.5 | 2023-08-22 | Null pointer dereference in ieee_write_file in nasm 2.16rc0 allows attackers to cause a denial of service (crash). |
CVE-2022-29654 | Medium | 5.5 | 2023-08-22 | Buffer overflow vulnerability in quote_for_pmake in asm/nasm.c in nasm before 2.15.05 allows attackers to cause a denial of service via crafted file. |
CVE-2020-21687 | Medium | 5.5 | 2023-08-22 | Buffer Overflow vulnerability in scan function in stdscan.c in nasm 2.15rc0 allows remote attackers to cause a denial of service via crafted asm file. |
CVE-2020-21686 | Medium | 5.5 | 2023-08-22 | A stack-use-after-scope issue discovered in expand_mmac_params function in preproc.c in nasm before 2.15.04 allows remote attackers to cause a denial of servic… |
CVE-2020-21685 | Medium | 5.5 | 2023-08-22 | Buffer Overflow vulnerability in hash_findi function in hashtbl.c in nasm 2.15rc0 allows remote attackers to cause a denial of service via crafted asm file. |
CVE-2020-21528 | Medium | 5.5 | 2023-08-22 | A Segmentation Fault issue discovered in in ieee_segment function in outieee.c in nasm 2.14.03 and 2.15 allows remote attackers to cause a denial of service vi… |
CVE-2020-18780 | Medium | 5.5 | 2023-08-22 | A Use After Free vulnerability in function new_Token in asm/preproc.c in nasm 2.14.02 allows attackers to cause a denial of service via crafted nasm command. |
CVE-2023-31722 | High | 7.8 | 2023-05-17 | There exists a heap buffer overflow in nasm 2.16.02rc1 (GitHub commit: b952891). |
CVE-2022-44370 | High | 7.8 | 2023-03-29 | NASM v2.16 was discovered to contain a heap buffer overflow in the component quote_for_pmake() asm/nasm.c:856 |
CVE-2022-44369 | Medium | 5.5 | 2023-03-29 | NASM 2.16 (development) is vulnerable to 476: Null Pointer Dereference via output/outaout.c. |
CVE-2022-44368 | Medium | 5.5 | 2023-03-29 | NASM v2.16 was discovered to contain a null pointer deference in the NASM component |
CVE-2022-46457 | Medium | 5.5 | 2023-01-04 | NASM v2.16 was discovered to contain a segmentation violation in the component ieee_write_file at /output/outieee.c. |
CVE-2022-46456 | Medium | 6.1 | 2023-01-04 | NASM v2.16 was discovered to contain a global buffer overflow in the component dbgdbg_typevalue at /output/outdbg.c. |
CVE-2022-41420 | Medium | 5.5 | 2022-10-03 | nasm v2.16 was discovered to contain a stack overflow in the Ndisasm component |
CVE-2021-33452 | Medium | 5.5 | 2022-07-26 | An issue was discovered in NASM version 2.16rc0. There are memory leaks in nasm_malloc() in nasmlib/alloc.c. |
CVE-2021-33450 | Medium | 5.5 | 2022-07-26 | An issue was discovered in NASM version 2.16rc0. There are memory leaks in nasm_calloc() in nasmlib/alloc.c. |
CVE-2021-45257 | Medium | 5.5 | 2021-12-22 | An infinite loop vulnerability exists in nasm 2.16rc0 via the gpaste_tokens function. |
CVE-2021-45256 | Medium | 5.5 | 2021-12-22 | A Null Pointer Dereference vulnerability existfs in nasm 2.16rc0 via asm/preproc.c. |
CVE-2020-18974 | Low | 3.3 | 2021-08-25 | Buffer Overflow in Netwide Assembler (NASM) v2.15.xx allows attackers to cause a denial of service via 'crc64i' in the component 'nasmlib/crc64'. This issue is… |
CVE-2020-24978 | Critical | 9.8 | 2020-09-04 | In NASM 2.15.04rc3, there is a double-free vulnerability in pp_tokline asm/preproc.c. This is fixed in commit 8806c3ca007b84accac21dd88b900fb03614ceb7. |
CVE-2020-24242 | Medium | 5.5 | 2020-08-25 | In Netwide Assembler (NASM) 2.15rc10, SEGV can be triggered in tok_text in asm/preproc.c by accessing READ memory. |
CVE-2020-24241 | Medium | 5.5 | 2020-08-25 | In Netwide Assembler (NASM) 2.15rc10, there is heap use-after-free in saa_wbytes in nasmlib/saa.c. |
CVE-2019-20352 | High | 7.1 | 2020-01-06 | In Netwide Assembler (NASM) 2.15rc0, a heap-based buffer over-read occurs (via a crafted .asm file) in set_text_free when called from expand_one_smacro in asm/… |
CVE-2019-20334 | Medium | 5.5 | 2020-01-04 | In Netwide Assembler (NASM) 2.14.02, stack consumption occurs in expr# functions in asm/eval.c. This potentially affects the relationships among expr0, expr1… |
CVE-2019-14248 | Medium | 5.5 | 2019-07-24 | In libnasm.a in Netwide Assembler (NASM) 2.14.xx, asm/pragma.c allows a NULL pointer dereference in process_pragma, search_pragma_list, and nasm_set_limit when… |
CVE-2019-8343 | High | 7.8 | 2019-02-15 | In Netwide Assembler (NASM) 2.14.02, there is a use-after-free in paste_tokens in asm/preproc.c. |
CVE-2019-7147 | Medium | 5.5 | 2019-01-29 | A buffer over-read exists in the function crc64ib in crc64.c in nasmlib in Netwide Assembler (NASM) 2.14rc16. A crafted asm input can cause segmentation faults… |
CVE-2019-6291 | Medium | 5.5 | 2019-01-15 | An issue was discovered in the function expr6 in eval.c in Netwide Assembler (NASM) through 2.14.02. There is a stack exhaustion problem caused by the expr6 fu… |
CVE-2019-6290 | Medium | 5.5 | 2019-01-15 | An infinite recursion issue was discovered in eval.c in Netwide Assembler (NASM) through 2.14.02. There is a stack exhaustion problem resulting from infinite r… |
CVE-2018-20538 | Medium | 5.5 | 2018-12-28 | There is a use-after-free at asm/preproc.c (function pp_getline) in Netwide Assembler (NASM) 2.14rc16 that will cause a denial of service during certain finish… |
CVE-2018-20535 | Medium | 5.5 | 2018-12-28 | There is a use-after-free at asm/preproc.c (function pp_getline) in Netwide Assembler (NASM) 2.14rc16 that will cause a denial of service during a line-number… |
CVE-2018-1000886 | Medium | 5.5 | 2018-12-20 | nasm version 2.14.01rc5, 2.15 contains a Buffer Overflow vulnerability in asm/stdscan.c:130 that can result in Stack-overflow caused by triggering endless macr… |
CVE-2018-19755 | Medium | 5.5 | 2018-11-30 | There is an illegal address access at asm/preproc.c (function: is_mmacro) in Netwide Assembler (NASM) 2.14rc16 that will cause a denial of service (out-of-boun… |
CVE-2018-19216 | High | 7.8 | 2018-11-12 | Netwide Assembler (NASM) before 2.13.02 has a use-after-free in detoken at asm/preproc.c. |
CVE-2018-19215 | High | 7.8 | 2018-11-12 | Netwide Assembler (NASM) 2.14rc16 has a heap-based buffer over-read in expand_mmac_params in asm/preproc.c for the special cases of the % and $ and ! character… |
CVE-2018-19214 | High | 7.8 | 2018-11-12 | Netwide Assembler (NASM) 2.14rc15 has a heap-based buffer over-read in expand_mmac_params in asm/preproc.c for insufficient input. |
CVE-2018-19213 | Medium | 5.5 | 2018-11-12 | Netwide Assembler (NASM) through 2.14rc16 has memory leaks that may lead to DoS, related to nasm_malloc in nasmlib/malloc.c. |
CVE-2018-19209 | Medium | 5.5 | 2018-11-12 | Netwide Assembler (NASM) 2.14rc15 has a NULL pointer dereference in the function find_label in asm/labels.c that will lead to a DoS attack. |
CVE-2018-16999 | Medium | 5.5 | 2018-09-13 | Netwide Assembler (NASM) 2.14rc15 has an invalid memory write (segmentation fault) in expand_smacro in preproc.c, which allows attackers to cause a denial of s… |
CVE-2018-16517 | Medium | 5.5 | 2018-09-06 | asm/labels.c in Netwide Assembler (NASM) is prone to NULL Pointer Dereference, which allows the attacker to cause a denial of service via a crafted file. |
CVE-2018-1000667 | Medium | 5.5 | 2018-09-06 | NASM nasm-2.13.03 nasm- 2.14rc15 version 2.14rc15 and earlier contains a memory corruption (crashed) of nasm when handling a crafted file due to function assem… |
CVE-2018-16382 | Medium | 5.5 | 2018-09-03 | Netwide Assembler (NASM) 2.14rc15 has a buffer over-read in x86/regflags.c. |
CVE-2018-10316 | Medium | 5.5 | 2018-04-24 | Netwide Assembler (NASM) 2.14rc0 has an endless while loop in the assemble_file function of asm/nasm.c because of a globallineno integer overflow. |
CVE-2018-10254 | High | 7.8 | 2018-04-21 | Netwide Assembler (NASM) 2.13 has a stack-based buffer over-read in the disasm function of the disasm/disasm.c file. Remote attackers could leverage this vulne… |
CVE-2018-10016 | Medium | 5.5 | 2018-04-11 | Netwide Assembler (NASM) 2.14rc0 has a division-by-zero vulnerability in the expr5 function in asm/eval.c via a malformed input file. |
CVE-2018-8883 | High | 7.8 | 2018-03-20 | Netwide Assembler (NASM) 2.13.02rc2 has a buffer over-read in the parse_line function in asm/parser.c via uncontrolled access to nasm_reg_flags. |
CVE-2018-8882 | High | 7.8 | 2018-03-20 | Netwide Assembler (NASM) 2.13.02rc2 has a stack-based buffer under-read in the function ieee_shr in asm/float.c via a large shift value. |
CVE-2018-8881 | High | 7.3 | 2018-03-20 | Netwide Assembler (NASM) 2.13.02rc2 has a heap-based buffer over-read in the function tokenize in asm/preproc.c, related to an unterminated string. |
CVE-2017-17820 | Medium | 5.5 | 2017-12-21 | In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_list_one_macro in asm/preproc.c that will lead to a remote denial of service attack, relat… |
CVE-2017-17819 | Medium | 5.5 | 2017-12-21 | In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function find_cc() in asm/preproc.c that will cause a remote denial of service a… |
CVE-2017-17818 | High | 7.5 | 2017-12-21 | In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read that will cause a remote denial of service attack, related to a while loop in paste… |
CVE-2017-17817 | Medium | 5.5 | 2017-12-21 | In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_verror in asm/preproc.c that will cause a remote denial of service attack. |
CVE-2017-17816 | Medium | 5.5 | 2017-12-21 | In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_getline in asm/preproc.c that will cause a remote denial of service attack. |
CVE-2017-17815 | Medium | 5.5 | 2017-12-21 | In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in is_mmacro() in asm/preproc.c that will cause a remote denial of service attack, beca… |
CVE-2017-17814 | Medium | 5.5 | 2017-12-21 | In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in do_directive in asm/preproc.c that will cause a remote denial of service attack. |
CVE-2017-17813 | Medium | 5.5 | 2017-12-21 | In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in the pp_list_one_macro function in asm/preproc.c that will cause a remote denial of service at… |
CVE-2017-17812 | Medium | 5.5 | 2017-12-21 | In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read in the function detoken() in asm/preproc.c that will cause a remote denial of servi… |
CVE-2017-17811 | Medium | 5.5 | 2017-12-21 | In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer overflow that will cause a remote denial of service attack, related to a strcpy in paste_toke… |
CVE-2017-17810 | Medium | 5.5 | 2017-12-21 | In Netwide Assembler (NASM) 2.14rc0, there is a "SEGV on unknown address" that will cause a remote denial of service attack, because asm/preproc.c mishandles m… |
CVE-2017-14228 | Medium | 5.5 | 2017-09-09 | In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function paste_tokens() in preproc.c, aka a NULL pointer dereference. It will le… |
CVE-2017-11111 | High | 7.8 | 2017-07-08 | In Netwide Assembler (NASM) 2.14rc0, preproc.c allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possi… |
CVE-2017-10686 | High | 7.8 | 2017-06-29 | In Netwide Assembler (NASM) 2.14rc0, there are multiple heap use after free vulnerabilities in the tool nasm. The related heap is allocated in the token() func… |
CVE-2008-7177 | | | 2009-09-08 | Buffer overflow in the listing module in Netwide Assembler (NASM) before 2.03.01 has unknown impact and attack vectors, a different vulnerability than CVE-2008… |
CVE-2008-2719 | | | 2008-06-16 | Off-by-one error in the ppscan function (preproc.c) in Netwide Assembler (NASM) 2.02 allows context-dependent attackers to cause a denial of service (crash) an… |
CVE-2004-1287 | | | 2005-01-10 | Buffer overflow in the error function in preproc.c for NASM 0.98.38 1.2 allows attackers to execute arbitrary code via a crafted asm file, a different vulnerab… |