Nasm vulnerabilities
We track 6 vulnerabilities in Nasm products across 3 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on April 10, 2026.
Latest Nasm vulnerabilities
- 7.5 High severity
NASM: Out-of-bounds Write
NASM’s disasm() function contains a stack based buffer overflow when formatting disassembly output, allowing an attacker triggered out-of-bounds write when `slen` exceeds the buffer capacity.
- 9.6 Critical severity
NASM: Use After Free
NASM contains a heap use after free vulnerability in response file (-@) processing where a dangling pointer to freed memory is stored in the global depend_file and later dereferenced, as the response-file buffer is freed before the pointer is used, allowing fo
- 7.8 High severity
Netwide Assember: Out-of-bounds Write
A vulnerability has been found in NASM Netwide Assember 2.17rc0. Affected is the function parse_line of the file parser.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the p
- 7.8 High severity
Netwide Assember: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was identified in NASM Netwide Assember 2.17rc0. This issue affects the function assemble_file of the file nasm.c. The manipulation leads to stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit has bee
- 7.8 High severity
Netwide Assember: Out-of-bounds Write
A vulnerability was found in NASM Netwide Assember 2.17rc0. This affects the function macho_no_dead_strip of the file outmacho.c. The manipulation leads to heap-based buffer overflow. Local access is required to approach this attack. The exploit has been discl
- 7.8 High severity
Netwide Assember: Use After Free
A vulnerability has been found in NASM Netwide Assember 2.17rc0. Affected by this issue is the function do_directive of the file preproc.c. The manipulation leads to use after free. An attack has to be approached locally. The exploit has been disclosed to the