Stack-based Buffer Over-read in Netwide Assembler by NASM
CVE-2018-10254

7.8HIGH

Key Information:

Vendor: Nasm
Status: Netwide Assembler
Vendor: CVE Published:; 21 April 2018

What is CVE-2018-10254?

The vulnerability present in Netwide Assembler (NASM) version 2.13 pertains to a stack-based buffer over-read within the disasm function located in disasm/disasm.c. This flaw allows remote attackers to potentially exploit the vulnerability by sending specially crafted ELF files, which may lead to a Denial of Service or other unspecified impacts. Addressing this vulnerability is crucial to maintaining the integrity and reliability of systems utilizing NASM.