Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-6067

Опубликовано: 10 апр. 2026
Источник: nvd
CVSS3: 5.5
CVSS3: 7.5
EPSS Низкий

Описание

A heap buffer overflow vulnerability exists in the Netwide Assembler (NASM) due to a lack of bounds checking in the obj_directive() function. This vulnerability can be exploited by a user assembling a malicious .asm file, potentially leading to heap memory corruption, denial of service (crash), and arbitrary code execution.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:nasm:netwide_assembler:3.02:rc5:*:*:*:*:*:*

EPSS

Процентиль: 28%
0.00357
Низкий

5.5 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 5.5
ubuntu
4 месяца назад

A heap buffer overflow vulnerability exists in the Netwide Assembler (NASM) due to a lack of bounds checking in the obj_directive() function. This vulnerability can be exploited by a user assembling a malicious .asm file, potentially leading to heap memory corruption, denial of service (crash), and arbitrary code execution.

CVSS3: 5.5
debian
4 месяца назад

A heap buffer overflow vulnerability exists in the Netwide Assembler ( ...

CVSS3: 7.5
github
4 месяца назад

A heap buffer overflow vulnerability exists in the Netwide Assembler (NASM) due to a lack of bounds checking in the obj_directive() function. This vulnerability can be exploited by a user assembling a malicious .asm file, potentially leading to heap memory corruption, denial of service (crash), and arbitrary code execution.

suse-cvrf
24 дня назад

Security update for nasm

suse-cvrf
15 дней назад

Security update for nasm

EPSS

Процентиль: 28%
0.00357
Низкий

5.5 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-787