VYPR
← All advisories
Medium severity5.5OSV Advisory· Published Dec 20, 2018· Updated Jun 17, 2026

CVE-2018-1000886

CVE-2018-1000886

Description

nasm version 2.14.01rc5, 2.15 contains a Buffer Overflow vulnerability in asm/stdscan.c:130 that can result in Stack-overflow caused by triggering endless macro generation, crash the program. This attack appear to be exploitable via a crafted nasm input file.

Affected products

4
  • Nasm/NASMOSV2 versions
    before-reformat-2005-01, fork-0.98-j, fork-0.98-j5, …+ 1 more
    • (no CPE)range: before-reformat-2005-01, fork-0.98-j, fork-0.98-j5, …
    • (no CPE)range: 2.14.01rc5, 2.15
  • Nasm/Netwide Assembler2 versions
    cpe:2.3:a:nasm:netwide_assembler:2.14.01rc5:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:nasm:netwide_assembler:2.14.01rc5:*:*:*:*:*:*:*
    • cpe:2.3:a:nasm:netwide_assembler:2.15:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.