Nasm Netwide_assembler
75 CVEs affecting Nasm Netwide_assembler. Latest disclosed: 2026-04-10. Critical: 2, High: 15.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-24978 | Critical | 9.8 | 2020-09-04 | In NASM 2.15.04rc3, there is a double-free vulnerability in pp_tokline asm/preproc.c. This is fixed in commit 8806c3ca007b84accac21dd88b900fb03614ceb7. |
CVE-2026-6068 | Critical | 9.6 | 2026-04-10 | NASM contains a heap use after free vulnerability in response file (-@) processing where a dangling pointer to freed memory is stored in the global depend_file… |
CVE-2023-31722 | High | 7.8 | 2023-05-17 | There exists a heap buffer overflow in nasm 2.16.02rc1 (GitHub commit: b952891). |
CVE-2022-44370 | High | 7.8 | 2023-03-29 | NASM v2.16 was discovered to contain a heap buffer overflow in the component quote_for_pmake() asm/nasm.c:856 |
CVE-2019-8343 | High | 7.8 | 2019-02-15 | In Netwide Assembler (NASM) 2.14.02, there is a use-after-free in paste_tokens in asm/preproc.c. |
CVE-2018-19216 | High | 7.8 | 2018-11-12 | Netwide Assembler (NASM) before 2.13.02 has a use-after-free in detoken at asm/preproc.c. |
CVE-2018-19215 | High | 7.8 | 2018-11-12 | Netwide Assembler (NASM) 2.14rc16 has a heap-based buffer over-read in expand_mmac_params in asm/preproc.c for the special cases of the % and $ and ! character… |
CVE-2018-19214 | High | 7.8 | 2018-11-12 | Netwide Assembler (NASM) 2.14rc15 has a heap-based buffer over-read in expand_mmac_params in asm/preproc.c for insufficient input. |
CVE-2018-10254 | High | 7.8 | 2018-04-21 | Netwide Assembler (NASM) 2.13 has a stack-based buffer over-read in the disasm function of the disasm/disasm.c file. Remote attackers could leverage this vulne… |
CVE-2018-8883 | High | 7.8 | 2018-03-20 | Netwide Assembler (NASM) 2.13.02rc2 has a buffer over-read in the parse_line function in asm/parser.c via uncontrolled access to nasm_reg_flags. |
CVE-2018-8882 | High | 7.8 | 2018-03-20 | Netwide Assembler (NASM) 2.13.02rc2 has a stack-based buffer under-read in the function ieee_shr in asm/float.c via a large shift value. |
CVE-2017-11111 | High | 7.8 | 2017-07-08 | In Netwide Assembler (NASM) 2.14rc0, preproc.c allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possi… |
CVE-2017-10686 | High | 7.8 | 2017-06-29 | In Netwide Assembler (NASM) 2.14rc0, there are multiple heap use after free vulnerabilities in the tool nasm. The related heap is allocated in the token() func… |
CVE-2026-6069 | High | 7.5 | 2026-04-10 | NASM’s disasm() function contains a stack based buffer overflow when formatting disassembly output, allowing an attacker triggered out-of-bounds write when `sl… |
CVE-2017-17818 | High | 7.5 | 2017-12-21 | In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read that will cause a remote denial of service attack, related to a while loop in paste… |
CVE-2018-8881 | High | 7.3 | 2018-03-20 | Netwide Assembler (NASM) 2.13.02rc2 has a heap-based buffer over-read in the function tokenize in asm/preproc.c, related to an unterminated string. |
CVE-2019-20352 | High | 7.1 | 2020-01-06 | In Netwide Assembler (NASM) 2.15rc0, a heap-based buffer over-read occurs (via a crafted .asm file) in set_text_free when called from expand_one_smacro in asm/… |
CVE-2022-46456 | Medium | 6.1 | 2023-01-04 | NASM v2.16 was discovered to contain a global buffer overflow in the component dbgdbg_typevalue at /output/outdbg.c. |
CVE-2026-6067 | Medium | 5.5 | 2026-04-10 | A heap buffer overflow vulnerability exists in the Netwide Assembler (NASM) due to a lack of bounds checking in the obj_directive() function. This vulnerabilit… |
CVE-2023-38668 | Medium | 5.5 | 2023-08-22 | Stack-based buffer over-read in disasm in nasm 2.16 allows attackers to cause a denial of service (crash). |