Medium severity5.5NVD Advisory· Published Apr 10, 2026· Updated Apr 23, 2026
CVE-2026-6067
CVE-2026-6067
Description
A heap buffer overflow vulnerability exists in the Netwide Assembler (NASM) due to a lack of bounds checking in the obj_directive() function. This vulnerability can be exploited by a user assembling a malicious .asm file, potentially leading to heap memory corruption, denial of service (crash), and arbitrary code execution.
Affected products
1- cpe:2.3:a:nasm:netwide_assembler:3.02:rc5:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- github.com/netwide-assembler/nasm/issues/203nvdExploitIssue Tracking
News mentions
0No linked articles in our index yet.