Heap Buffer Overflow in NASM v2.16 by NASM
CVE-2022-44370

7.8HIGH

Key Information:

Vendor

Nasm

Status
Netwide Assembler
Vendor
CVE Published:
29 March 2023

What is CVE-2022-44370?

NASM v2.16 has been found to contain a vulnerability leading to a heap buffer overflow in the function quote_for_pmake(), specifically at asm/nasm.c:856. This weakness can potentially allow an attacker to exploit system memory, leading to unpredictable behavior and stability issues in affected systems.

References

https://bugzilla.nasm.us/show_bug.cgi?id=3392815
https://security.gentoo.org/glsa/202312-09
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.