CVE-2023-38668
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
A stack-based buffer over-read vulnerability in nasm version 2.16 allows attackers to cause a denial of service (crash).
Risk Assessment
Attackers can exploit this vulnerability to trigger a denial of service, potentially leading to application downtime.
Recommendation
It is recommended to update nasm to the latest version to mitigate this vulnerability.
Other vulnerabilities in nasm
See all- CVE-2026-6068Critical
NASM contains a heap use after free vulnerability in response file (-@) processing where a dangling pointer to freed memory is stored in the global depend_file and later dereferenced. The response-file buffer is freed before the pointer is used, allowing for data corruption or remote code execution.
- CVE-2023-38667Medium
A stack-based buffer over-read in the disasm function in nasm 2.16 allows attackers to cause a denial of service.
- CVE-2023-38665Medium
In version 2.16rc0 of nasm, there is a null pointer dereference issue in the ieee_write_file function, which can lead to a program crash.
Original NVD description (English source)
Stack-based buffer over-read in disasm in nasm 2.16 allows attackers to cause a denial of service (crash).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS