CVE-2023-38665
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
In version 2.16rc0 of nasm, there is a null pointer dereference issue in the ieee_write_file function, which can lead to a program crash.
Risk Assessment
Attackers can exploit this vulnerability to cause a denial of service, impacting system availability.
Recommendation
It is recommended to update the nasm tool to the latest version to mitigate this vulnerability.
Other vulnerabilities in nasm 2.16rc0
See all- CVE-2026-6068Critical
NASM contains a heap use after free vulnerability in response file (-@) processing where a dangling pointer to freed memory is stored in the global depend_file and later dereferenced. The response-file buffer is freed before the pointer is used, allowing for data corruption or remote code execution.
- CVE-2023-38668Medium
A stack-based buffer over-read vulnerability in nasm version 2.16 allows attackers to cause a denial of service (crash).
- CVE-2023-38667Medium
A stack-based buffer over-read in the disasm function in nasm 2.16 allows attackers to cause a denial of service.
Original NVD description (English source)
Null pointer dereference in ieee_write_file in nasm 2.16rc0 allows attackers to cause a denial of service (crash).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS