VYPR
← All advisories
Medium severity5.5OSV Advisory· Published Dec 20, 2018· Updated Jun 17, 2026

CVE-2018-1000886

CVE-2018-1000886

Description

nasm version 2.14.01rc5, 2.15 contains a Buffer Overflow vulnerability in asm/stdscan.c:130 that can result in Stack-overflow caused by triggering endless macro generation, crash the program. This attack appear to be exploitable via a crafted nasm input file.

Affected products

2
  • Nasm/NASMOSV2 versions
    before-reformat-2005-01, fork-0.98-j, fork-0.98-j5, …+ 1 more
    • (no CPE)range: before-reformat-2005-01, fork-0.98-j, fork-0.98-j5, …
    • (no CPE)range: 2.14.01rc5, 2.15

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.