CVE-2023-37732

MediumCVSS 5.5

Published: 26/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.34%

25th percentile - higher than 25% of all known CVEs

Summary

Yasm v1.3.0.78 is prone to NULL Pointer Dereference in /libyasm/intnum.c and /elf/elf.c. An attacker can exploit this vulnerability to cause a denial of service via a crafted file.

Risk Assessment

This vulnerability may lead to denial of service, affecting the availability of the system and its functions for users.

Recommendation

It is recommended to update Yasm to the latest version to mitigate this vulnerability and to monitor the system for unauthorized access attempts.

Original NVD description (English source)

Yasm v1.3.0.78 was found prone to NULL Pointer Dereference in /libyasm/intnum.c and /elf/elf.c, which allows the attacker to cause a denial of service via a crafted file.