Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wwjw-6p2f-76rh

Опубликовано: 10 апр. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

NASM contains a heap use after free vulnerability in response file (-@) processing where a dangling pointer to freed memory is stored in the global depend_file and later dereferenced, as the response-file buffer is freed before the pointer is used, allowing for data corruption or unexpected behavior.

NASM contains a heap use after free vulnerability in response file (-@) processing where a dangling pointer to freed memory is stored in the global depend_file and later dereferenced, as the response-file buffer is freed before the pointer is used, allowing for data corruption or unexpected behavior.

EPSS

Процентиль: 35%
0.00426
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 9.6
ubuntu
4 месяца назад

NASM contains a heap use after free vulnerability in response file (-@) processing where a dangling pointer to freed memory is stored in the global depend_file and later dereferenced, as the response-file buffer is freed before the pointer is used, allowing for data corruption or remote code execution.

CVSS3: 6.8
redhat
4 месяца назад

NASM contains a heap use after free vulnerability in response file (-@) processing where a dangling pointer to freed memory is stored in the global depend_file and later dereferenced, as the response-file buffer is freed before the pointer is used, allowing for data corruption or remote code execution.

CVSS3: 9.6
nvd
4 месяца назад

NASM contains a heap use after free vulnerability in response file (-@) processing where a dangling pointer to freed memory is stored in the global depend_file and later dereferenced, as the response-file buffer is freed before the pointer is used, allowing for data corruption or remote code execution.

CVSS3: 9.6
debian
4 месяца назад

NASM contains a heap use after free vulnerability in response file (-@ ...

CVSS3: 6.5
fstec
4 месяца назад

Уязвимость функции process_respfile файла asm/nasm.c ассемблера Netwide Assembler (NASM), позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 35%
0.00426
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-416