Yasm Project

Yasm

17 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
3.3

CVE-2023-31975

Exploit
  • EPSS 0.02%
  • Published 09.05.2023 13:15:18
  • Last modified 29.01.2025 19:15:17

yasm v1.3.0 was discovered to contain a memory leak via the function yasm_intnum_copy at /libyasm/intnum.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy.

5.5

CVE-2023-30402

Exploit
  • EPSS 0.03%
  • Published 25.04.2023 16:15:09
  • Last modified 21.11.2024 08:00:07

YASM v1.3.0 was discovered to contain a heap overflow via the function handle_dot_label at /nasm/nasm-token.re. Note: This has been disputed by third parties who argue this is a bug and not a security issue because yasm is a standalone program not de...

5.5

CVE-2023-29583

Exploit
  • EPSS 0.04%
  • Published 24.04.2023 13:15:07
  • Last modified 21.11.2024 07:57:19

yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the function parse_expr5 at /nasm/nasm-parse.c. Note: This has been disputed by third parties who argue this is a bug and not a security issue because yasm is a standalone program no...

5.5

CVE-2023-29582

Exploit
  • EPSS 0.03%
  • Published 24.04.2023 13:15:07
  • Last modified 21.11.2024 07:57:19

yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the function parse_expr1 at /nasm/nasm-parse.c. Note: This has been disputed by third parties who argue this is a bug and not a security issue because yasm is a standalone program no...

5.5

CVE-2023-29579

Exploit
  • EPSS 0.03%
  • Published 24.04.2023 13:15:07
  • Last modified 21.11.2024 07:57:18

yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the component yasm/yasm+0x43b466 in vsprintf. Note: This has been disputed by third parties who argue this is a bug and not a security issue because yasm is a standalone program not ...

5.5

CVE-2023-29581

Exploit
  • EPSS 0.03%
  • Published 12.04.2023 16:15:19
  • Last modified 21.11.2024 07:57:18

yasm 1.3.0.55.g101bc has a segmentation violation in the function delete_Token at modules/preprocs/nasm/nasm-pp.c. NOTE: although a libyasm application could become unavailable if this were exploited, the vendor's position is that there is no securit...

5.5

CVE-2023-29580

Exploit
  • EPSS 0.11%
  • Published 12.04.2023 13:15:07
  • Last modified 08.02.2025 03:15:11

yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the component yasm_expr_create at /libyasm/expr.c.