NA
Product
Netwide Assembler
by Nasm · last CVE Apr 10, 2026
75
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 19Medium 50Low 1
Watch

Add Netwide Assembler to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-24978
9.8
1%
Sep 4
In NASM 2.15.04rc3, there is a double-free vulnerability in pp_tokline asm/preproc.c
Affected: 2.15.04
CVE-2026-6068
9.6
0%
Apr 10
No description published yet
Affected: 3.02
CVE-2025-8846
7.8
0%
Aug 11
A vulnerability has been found in NASM Netwide Assember 2.17rc0
Affected: 2.17
CVE-2025-8845
7.8
0%
Aug 11
A vulnerability was identified in NASM Netwide Assember 2.17rc0
Affected: 2.17
CVE-2025-8843
7.8
0%
Aug 11
A vulnerability was found in NASM Netwide Assember 2.17rc0
Affected: 2.17
CVE-2025-8842
7.8
0%
Aug 11
A vulnerability has been found in NASM Netwide Assember 2.17rc0
Affected: 2.17
CVE-2023-31722
7.8
0%
May 17
There exists a heap buffer overflow in nasm 2.16.02rc1 (GitHub commit: b952891)
Affected: 2.16.02
CVE-2022-44370
7.8
0%
Mar 29
NASM v2.16 was discovered to contain a heap buffer overflow in the component quote_for_pmake() asm/nasm.c:856
Affected: before 2.16; 2.16
CVE-2019-8343
7.8
1%
Feb 15
In Netwide Assembler (NASM) 2.14.02, there is a use-after-free in paste_tokens in asm/preproc.c
Affected: 2.14.02
CVE-2018-19216
7.8
1%
Nov 12
Netwide Assembler (NASM) before 2.13.02 has a use-after-free in detoken at asm/preproc.c
Affected: before 2.13.02
CVE-2018-19215
7.8
1%
Nov 12
Netwide Assembler (NASM) 2.14rc16 has a heap-based buffer over-read in expand_mmac_params in asm/preproc.c for the special cases of the % and $ and ! characters
Affected: 12.14
CVE-2018-19214
7.8
1%
Nov 12
Netwide Assembler (NASM) 2.14rc15 has a heap-based buffer over-read in expand_mmac_params in asm/preproc.c for insufficient input
Affected: 12.14
CVE-2018-10254
7.8
1%
Apr 21
Netwide Assembler (NASM) 2.13 has a stack-based buffer over-read in the disasm function of the disasm/disasm.c file
Affected: 2.13
CVE-2018-8883
7.8
0%
Mar 20
Netwide Assembler (NASM) 2.13.02rc2 has a buffer over-read in the parse_line function in asm/parser.c via uncontrolled access to nasm_reg_flags
Affected: 2.13.02
CVE-2018-8882
7.8
0%
Mar 20
Netwide Assembler (NASM) 2.13.02rc2 has a stack-based buffer under-read in the function ieee_shr in asm/float.c via a large shift value
Affected: 2.13.02
CVE-2017-11111
7.8
2%
Jul 8
In Netwide Assembler (NASM) 2.14rc0, preproc.c allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified…
Affected: 2.14
CVE-2017-10686
7.8
3%
Jun 29
In Netwide Assembler (NASM) 2.14rc0, there are multiple heap use after free vulnerabilities in the tool nasm
Affected: 2.14
CVE-2026-6069
7.5
0%
Apr 10
No description published yet
Affected: 3.02
CVE-2017-17818
7.5
3%
Dec 21
In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read that will cause a remote denial of service attack, related to a while loop in paste_tokens in…
Affected: 2.14
CVE-2018-8881
7.3
1%
Mar 20
Netwide Assembler (NASM) 2.13.02rc2 has a heap-based buffer over-read in the function tokenize in asm/preproc.c, related to an unterminated string
Affected: 2.13.02
CVE-2019-20352
7.1
1%
Jan 6
In Netwide Assembler (NASM) 2.15rc0, a heap-based buffer over-read occurs (via a crafted .asm file) in set_text_free when called from expand_one_smacro in asm/preproc.c
Affected: 2.15
CVE-2022-46456
6.1
0%
Jan 4
NASM v2.16 was discovered to contain a global buffer overflow in the component dbgdbg_typevalue at /output/outdbg.c
Affected: 2.16; 2.16; 2.16; 2.16; 2.16; 2.16; +5 more
CVE-2026-6067
5.5
0%
Apr 10
No description published yet
Affected: 3.02
CVE-2025-8844
5.5
0%
Aug 11
A vulnerability was determined in NASM Netwide Assember 2.17rc0
Affected: 2.17
CVE-2023-38668
5.5
0%
Aug 22
Stack-based buffer over-read in disasm in nasm 2.16 allows attackers to cause a denial of service (crash)
Affected: 2.16
CVE-2023-38667
5.5
0%
Aug 22
Stack-based buffer over-read in function disasm in nasm 2.16 allows attackers to cause a denial of service
Affected: 2.16
CVE-2023-38665
5.5
0%
Aug 22
Null pointer dereference in ieee_write_file in nasm 2.16rc0 allows attackers to cause a denial of service (crash)
Affected: 2.16
CVE-2022-29654
5.5
0%
Aug 22
Buffer overflow vulnerability in quote_for_pmake in asm/nasm.c in nasm before 2.15.05 allows attackers to cause a denial of service via crafted file
Affected: before 2.15.05
CVE-2020-21687
5.5
0%
Aug 22
Buffer Overflow vulnerability in scan function in stdscan.c in nasm 2.15rc0 allows remote attackers to cause a denial of service via crafted asm file
Affected: 2.15
CVE-2020-21686
5.5
0%
Aug 22
A stack-use-after-scope issue discovered in expand_mmac_params function in preproc.c in nasm before 2.15.04 allows remote attackers to cause a denial of service via crafted asm…
Affected: before 2.15.04
CVE-2020-21685
5.5
0%
Aug 22
Buffer Overflow vulnerability in hash_findi function in hashtbl.c in nasm 2.15rc0 allows remote attackers to cause a denial of service via crafted asm file
Affected: 2.15
CVE-2020-21528
5.5
1%
Aug 22
A Segmentation Fault issue discovered in in ieee_segment function in outieee.c in nasm 2.14.03 and 2.15 allows remote attackers to cause a denial of service via crafted assembly…
Affected: 2.14.03; 2.15
CVE-2020-18780
5.5
0%
Aug 22
A Use After Free vulnerability in function new_Token in asm/preproc.c in nasm 2.14.02 allows attackers to cause a denial of service via crafted nasm command
Affected: 2.14.02
CVE-2022-44369
5.5
0%
Mar 29
NASM 2.16 (development) is vulnerable to 476: Null Pointer Dereference via output/outaout.c
Affected: 2.16; 2.16; 2.16; 2.16; 2.16; 2.16; +5 more
CVE-2022-44368
5.5
0%
Mar 29
NASM v2.16 was discovered to contain a null pointer deference in the NASM component
Affected: 2.16; 2.16; 2.16; 2.16; 2.16; 2.16; +5 more
CVE-2022-46457
5.5
0%
Jan 4
NASM v2.16 was discovered to contain a segmentation violation in the component ieee_write_file at /output/outieee.c
Affected: 2.16; 2.16; 2.16; 2.16; 2.16; 2.16; +5 more
CVE-2022-41420
5.5
0%
Oct 3
nasm v2.16 was discovered to contain a stack overflow in the Ndisasm component
Affected: 2.16
CVE-2021-33452
5.5
0%
Jul 26
An issue was discovered in NASM version 2.16rc0
Affected: 2.16
CVE-2021-33450
5.5
0%
Jul 26
An issue was discovered in NASM version 2.16rc0
Affected: 2.16
CVE-2021-45257
5.5
1%
Dec 22
An infinite loop vulnerability exists in nasm 2.16rc0 via the gpaste_tokens function
Affected: 2.16
CVE-2021-45256
5.5
1%
Dec 22
A Null Pointer Dereference vulnerability existfs in nasm 2.16rc0 via asm/preproc.c
Affected: 2.16
CVE-2020-24242
5.5
1%
Aug 25
In Netwide Assembler (NASM) 2.15rc10, SEGV can be triggered in tok_text in asm/preproc.c by accessing READ memory
Affected: 2.15
CVE-2020-24241
5.5
1%
Aug 25
In Netwide Assembler (NASM) 2.15rc10, there is heap use-after-free in saa_wbytes in nasmlib/saa.c
Affected: 2.15
CVE-2019-20334
5.5
1%
Jan 4
In Netwide Assembler (NASM) 2.14.02, stack consumption occurs in expr# functions in asm/eval.c
Affected: 2.14.02
CVE-2019-14248
5.5
1%
Jul 24
In libnasm.a in Netwide Assembler (NASM) 2.14.xx, asm/pragma.c allows a NULL pointer dereference in process_pragma, search_pragma_list, and nasm_set_limit when "%pragma limit" is…
Affected: 2.14 through 2.14.02
CVE-2019-7147
5.5
1%
Jan 29
A buffer over-read exists in the function crc64ib in crc64.c in nasmlib in Netwide Assembler (NASM) 2.14rc16
Affected: 2.14
CVE-2019-6291
5.5
1%
Jan 15
An issue was discovered in the function expr6 in eval.c in Netwide Assembler (NASM) through 2.14.02
Affected: through 2.14.02
CVE-2019-6290
5.5
1%
Jan 15
An infinite recursion issue was discovered in eval.c in Netwide Assembler (NASM) through 2.14.02
Affected: through 2.14.02
CVE-2018-20538
5.5
1%
Dec 28
There is a use-after-free at asm/preproc.c (function pp_getline) in Netwide Assembler (NASM) 2.14rc16 that will cause a denial of service during certain finishes tests
Affected: 2.14.0
CVE-2018-20535
5.5
1%
Dec 28
There is a use-after-free at asm/preproc.c (function pp_getline) in Netwide Assembler (NASM) 2.14rc16 that will cause a denial of service during a line-number increment attempt
Affected: 2.14.0
Page 1 of 2 · 75 total