yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the function parse_expr1 at /nasm/nasm-parse.c. Note: This has been disputed by third parties who argue this is a bug and not a security issue because yasm is a standalone program not designed to run untrusted code.
References
Configurations
History
21 Nov 2024, 07:57
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=2189601#c3 - | |
| References | () https://github.com/yasm/yasm/issues/217 - Exploit, Issue Tracking | |
| References | () https://github.com/z1r00/fuzz_vuln/blob/main/yasm/stack-overflow/parse_expr1/readme.md - Exploit |
14 May 2024, 12:55
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
| Summary | (en) yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the function parse_expr1 at /nasm/nasm-parse.c. Note: This has been disputed by third parties who argue this is a bug and not a security issue because yasm is a standalone program not designed to run untrusted code. |
Information
Published : 2023-04-24 13:15
Updated : 2024-11-21 07:57
NVD link : CVE-2023-29582
Mitre link : CVE-2023-29582
CVE.ORG link : CVE-2023-29582
JSON object : View
Products Affected
yasm_project
- yasm
CWE
CWE-787
Out-of-bounds Write