Buffer Over-read Vulnerability in Netwide Assembler (NASM) by Netwide Assembler
CVE-2018-8883

7.8HIGH

Key Information:

Vendor: Nasm
Status: Netwide Assembler
Vendor: CVE Published:; 20 March 2018

What is CVE-2018-8883?

The Netwide Assembler (NASM) version 2.13.02rc2 contains a buffer over-read vulnerability in the parse_line function located in asm/parser.c. This vulnerability arises from uncontrolled access to the nasm_reg_flags, allowing potential disclosure of sensitive information in memory. Attackers can exploit this weakness, leading to undesirable outcomes in systems using this version of NASM.