NA
Product
Netwide Assembler
75
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 19Medium 50Low 1
Watch
Add Netwide Assembler to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-24978 | 9.8 | Sep 4 | In NASM 2.15.04rc3, there is a double-free vulnerability in pp_tokline asm/preproc.c Affected: 2.15.04 |
| CVE-2026-6068 | 9.6 | Apr 10 | No description published yet Affected: 3.02 |
| CVE-2025-8846 | 7.8 | Aug 11 | A vulnerability has been found in NASM Netwide Assember 2.17rc0 Affected: 2.17 |
| CVE-2025-8845 | 7.8 | Aug 11 | A vulnerability was identified in NASM Netwide Assember 2.17rc0 Affected: 2.17 |
| CVE-2025-8843 | 7.8 | Aug 11 | A vulnerability was found in NASM Netwide Assember 2.17rc0 Affected: 2.17 |
| CVE-2025-8842 | 7.8 | Aug 11 | A vulnerability has been found in NASM Netwide Assember 2.17rc0 Affected: 2.17 |
| CVE-2023-31722 | 7.8 | May 17 | There exists a heap buffer overflow in nasm 2.16.02rc1 (GitHub commit: b952891) Affected: 2.16.02 |
| CVE-2022-44370 | 7.8 | Mar 29 | NASM v2.16 was discovered to contain a heap buffer overflow in the component quote_for_pmake() asm/nasm.c:856 Affected: before 2.16; 2.16 |
| CVE-2019-8343 | 7.8 | Feb 15 | In Netwide Assembler (NASM) 2.14.02, there is a use-after-free in paste_tokens in asm/preproc.c Affected: 2.14.02 |
| CVE-2018-19216 | 7.8 | Nov 12 | Netwide Assembler (NASM) before 2.13.02 has a use-after-free in detoken at asm/preproc.c Affected: before 2.13.02 |
| CVE-2018-19215 | 7.8 | Nov 12 | Netwide Assembler (NASM) 2.14rc16 has a heap-based buffer over-read in expand_mmac_params in asm/preproc.c for the special cases of the % and $ and ! characters Affected: 12.14 |
| CVE-2018-19214 | 7.8 | Nov 12 | Netwide Assembler (NASM) 2.14rc15 has a heap-based buffer over-read in expand_mmac_params in asm/preproc.c for insufficient input Affected: 12.14 |
| CVE-2018-10254 | 7.8 | Apr 21 | Netwide Assembler (NASM) 2.13 has a stack-based buffer over-read in the disasm function of the disasm/disasm.c file Affected: 2.13 |
| CVE-2018-8883 | 7.8 | Mar 20 | Netwide Assembler (NASM) 2.13.02rc2 has a buffer over-read in the parse_line function in asm/parser.c via uncontrolled access to nasm_reg_flags Affected: 2.13.02 |
| CVE-2018-8882 | 7.8 | Mar 20 | Netwide Assembler (NASM) 2.13.02rc2 has a stack-based buffer under-read in the function ieee_shr in asm/float.c via a large shift value Affected: 2.13.02 |
| CVE-2017-11111 | 7.8 | Jul 8 | In Netwide Assembler (NASM) 2.14rc0, preproc.c allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified… Affected: 2.14 |
| CVE-2017-10686 | 7.8 | Jun 29 | In Netwide Assembler (NASM) 2.14rc0, there are multiple heap use after free vulnerabilities in the tool nasm Affected: 2.14 |
| CVE-2026-6069 | 7.5 | Apr 10 | No description published yet Affected: 3.02 |
| CVE-2017-17818 | 7.5 | Dec 21 | In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read that will cause a remote denial of service attack, related to a while loop in paste_tokens in… Affected: 2.14 |
| CVE-2018-8881 | 7.3 | Mar 20 | Netwide Assembler (NASM) 2.13.02rc2 has a heap-based buffer over-read in the function tokenize in asm/preproc.c, related to an unterminated string Affected: 2.13.02 |
| CVE-2019-20352 | 7.1 | Jan 6 | In Netwide Assembler (NASM) 2.15rc0, a heap-based buffer over-read occurs (via a crafted .asm file) in set_text_free when called from expand_one_smacro in asm/preproc.c Affected: 2.15 |
| CVE-2022-46456 | 6.1 | Jan 4 | NASM v2.16 was discovered to contain a global buffer overflow in the component dbgdbg_typevalue at /output/outdbg.c Affected: 2.16; 2.16; 2.16; 2.16; 2.16; 2.16; +5 more |
| CVE-2026-6067 | 5.5 | Apr 10 | No description published yet Affected: 3.02 |
| CVE-2025-8844 | 5.5 | Aug 11 | A vulnerability was determined in NASM Netwide Assember 2.17rc0 Affected: 2.17 |
| CVE-2023-38668 | 5.5 | Aug 22 | Stack-based buffer over-read in disasm in nasm 2.16 allows attackers to cause a denial of service (crash) Affected: 2.16 |
| CVE-2023-38667 | 5.5 | Aug 22 | Stack-based buffer over-read in function disasm in nasm 2.16 allows attackers to cause a denial of service Affected: 2.16 |
| CVE-2023-38665 | 5.5 | Aug 22 | Null pointer dereference in ieee_write_file in nasm 2.16rc0 allows attackers to cause a denial of service (crash) Affected: 2.16 |
| CVE-2022-29654 | 5.5 | Aug 22 | Buffer overflow vulnerability in quote_for_pmake in asm/nasm.c in nasm before 2.15.05 allows attackers to cause a denial of service via crafted file Affected: before 2.15.05 |
| CVE-2020-21687 | 5.5 | Aug 22 | Buffer Overflow vulnerability in scan function in stdscan.c in nasm 2.15rc0 allows remote attackers to cause a denial of service via crafted asm file Affected: 2.15 |
| CVE-2020-21686 | 5.5 | Aug 22 | A stack-use-after-scope issue discovered in expand_mmac_params function in preproc.c in nasm before 2.15.04 allows remote attackers to cause a denial of service via crafted asm… Affected: before 2.15.04 |
| CVE-2020-21685 | 5.5 | Aug 22 | Buffer Overflow vulnerability in hash_findi function in hashtbl.c in nasm 2.15rc0 allows remote attackers to cause a denial of service via crafted asm file Affected: 2.15 |
| CVE-2020-21528 | 5.5 | Aug 22 | A Segmentation Fault issue discovered in in ieee_segment function in outieee.c in nasm 2.14.03 and 2.15 allows remote attackers to cause a denial of service via crafted assembly… Affected: 2.14.03; 2.15 |
| CVE-2020-18780 | 5.5 | Aug 22 | A Use After Free vulnerability in function new_Token in asm/preproc.c in nasm 2.14.02 allows attackers to cause a denial of service via crafted nasm command Affected: 2.14.02 |
| CVE-2022-44369 | 5.5 | Mar 29 | NASM 2.16 (development) is vulnerable to 476: Null Pointer Dereference via output/outaout.c Affected: 2.16; 2.16; 2.16; 2.16; 2.16; 2.16; +5 more |
| CVE-2022-44368 | 5.5 | Mar 29 | NASM v2.16 was discovered to contain a null pointer deference in the NASM component Affected: 2.16; 2.16; 2.16; 2.16; 2.16; 2.16; +5 more |
| CVE-2022-46457 | 5.5 | Jan 4 | NASM v2.16 was discovered to contain a segmentation violation in the component ieee_write_file at /output/outieee.c Affected: 2.16; 2.16; 2.16; 2.16; 2.16; 2.16; +5 more |
| CVE-2022-41420 | 5.5 | Oct 3 | nasm v2.16 was discovered to contain a stack overflow in the Ndisasm component Affected: 2.16 |
| CVE-2021-33452 | 5.5 | Jul 26 | An issue was discovered in NASM version 2.16rc0 Affected: 2.16 |
| CVE-2021-33450 | 5.5 | Jul 26 | An issue was discovered in NASM version 2.16rc0 Affected: 2.16 |
| CVE-2021-45257 | 5.5 | Dec 22 | An infinite loop vulnerability exists in nasm 2.16rc0 via the gpaste_tokens function Affected: 2.16 |
| CVE-2021-45256 | 5.5 | Dec 22 | A Null Pointer Dereference vulnerability existfs in nasm 2.16rc0 via asm/preproc.c Affected: 2.16 |
| CVE-2020-24242 | 5.5 | Aug 25 | In Netwide Assembler (NASM) 2.15rc10, SEGV can be triggered in tok_text in asm/preproc.c by accessing READ memory Affected: 2.15 |
| CVE-2020-24241 | 5.5 | Aug 25 | In Netwide Assembler (NASM) 2.15rc10, there is heap use-after-free in saa_wbytes in nasmlib/saa.c Affected: 2.15 |
| CVE-2019-20334 | 5.5 | Jan 4 | In Netwide Assembler (NASM) 2.14.02, stack consumption occurs in expr# functions in asm/eval.c Affected: 2.14.02 |
| CVE-2019-14248 | 5.5 | Jul 24 | In libnasm.a in Netwide Assembler (NASM) 2.14.xx, asm/pragma.c allows a NULL pointer dereference in process_pragma, search_pragma_list, and nasm_set_limit when "%pragma limit" is… Affected: 2.14 through 2.14.02 |
| CVE-2019-7147 | 5.5 | Jan 29 | A buffer over-read exists in the function crc64ib in crc64.c in nasmlib in Netwide Assembler (NASM) 2.14rc16 Affected: 2.14 |
| CVE-2019-6291 | 5.5 | Jan 15 | An issue was discovered in the function expr6 in eval.c in Netwide Assembler (NASM) through 2.14.02 Affected: through 2.14.02 |
| CVE-2019-6290 | 5.5 | Jan 15 | An infinite recursion issue was discovered in eval.c in Netwide Assembler (NASM) through 2.14.02 Affected: through 2.14.02 |
| CVE-2018-20538 | 5.5 | Dec 28 | There is a use-after-free at asm/preproc.c (function pp_getline) in Netwide Assembler (NASM) 2.14rc16 that will cause a denial of service during certain finishes tests Affected: 2.14.0 |
| CVE-2018-20535 | 5.5 | Dec 28 | There is a use-after-free at asm/preproc.c (function pp_getline) in Netwide Assembler (NASM) 2.14rc16 that will cause a denial of service during a line-number increment attempt Affected: 2.14.0 |
