Yasm Project

17 CVEs across 1 Yasm Project products. Browse Yasm Project vulnerabilities, severities, and proof-of-concept exploits.

Yasm Project products with known CVEs

ProductCVEs
Yasm17
Yasm Project CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-22653Medium4.82025-05-29yasm commit 9defefae was discovered to contain a NULL pointer dereference via the yasm_section_bcs_append function at section.c.
CVE-2023-49558Medium5.52024-01-03An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expand_mmac_params function in the modules/preprocs/nasm/nasm-pp…
CVE-2023-49557Medium5.52024-01-03An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the yasm_section_bcs_first function in the libyasm/section.c componen…
CVE-2023-49556Medium5.52024-01-03Buffer Overflow vulnerability in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expr_delete_term function in the libyasm/exp…
CVE-2023-49555Medium5.52024-01-03An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expand_smacro function in the modules/preprocs/nasm/nasm-pp.c com…
CVE-2023-49554Medium5.52024-01-03Use After Free vulnerability in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the do_directive function in the modules/preprocs…
CVE-2023-37732Medium5.52023-07-26Yasm v1.3.0.78 was found prone to NULL Pointer Dereference in /libyasm/intnum.c and /elf/elf.c, which allows the attacker to cause a denial of service via a cr…
CVE-2023-31725Medium5.52023-05-17yasm 1.3.0.55.g101bc was discovered to contain a heap-use-after-free via the function expand_mmac_params at yasm/modules/preprocs/nasm/nasm-pp.c.
CVE-2023-31724High7.82023-05-17yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function do_directive at /nasm/nasm-pp.c.
CVE-2023-31723Medium5.52023-05-17yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function expand_mmac_params at /nasm/nasm-pp.c.
CVE-2023-31975Low3.32023-05-09yasm v1.3.0 was discovered to contain a memory leak via the function yasm_intnum_copy at /libyasm/intnum.c. Note: Multiple third parties dispute this as a bug…
CVE-2023-30402Medium5.52023-04-25YASM v1.3.0 was discovered to contain a heap overflow via the function handle_dot_label at /nasm/nasm-token.re. Note: This has been disputed by third parties w…
CVE-2023-29583Medium5.52023-04-24yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the function parse_expr5 at /nasm/nasm-parse.c. Note: This has been disputed by third parti…
CVE-2023-29582Medium5.52023-04-24yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the function parse_expr1 at /nasm/nasm-parse.c. Note: This has been disputed by third parti…
CVE-2023-29579Medium5.52023-04-24yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the component yasm/yasm+0x43b466 in vsprintf. Note: This has been disputed by third parties…
CVE-2023-29581Medium5.52023-04-12yasm 1.3.0.55.g101bc has a segmentation violation in the function delete_Token at modules/preprocs/nasm/nasm-pp.c. NOTE: although a libyasm application could b…
CVE-2023-29580Medium5.52023-04-12yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the component yasm_expr_create at /libyasm/expr.c.