CVE-2023-38667
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
A stack-based buffer over-read in the disasm function in nasm 2.16 allows attackers to cause a denial of service.
Risk Assessment
Attackers can exploit this vulnerability to disrupt system operation, leading to denial of service for users.
Recommendation
It is recommended to update nasm to the latest version to mitigate this vulnerability.
Other vulnerabilities in nasm 2.16
See all- CVE-2026-6068Critical
NASM contains a heap use after free vulnerability in response file (-@) processing where a dangling pointer to freed memory is stored in the global depend_file and later dereferenced. The response-file buffer is freed before the pointer is used, allowing for data corruption or remote code execution.
- CVE-2023-38668Medium
A stack-based buffer over-read vulnerability in nasm version 2.16 allows attackers to cause a denial of service (crash).
- CVE-2023-38665Medium
In version 2.16rc0 of nasm, there is a null pointer dereference issue in the ieee_write_file function, which can lead to a program crash.
Original NVD description (English source)
Stack-based buffer over-read in function disasm in nasm 2.16 allows attackers to cause a denial of service.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS