NASM vulnerabilities

NASM contains a heap use after free vulnerability in response file (-@) processing where a dangling pointer to freed memory is stored in the global depend_file and later dereferenced. The response-file buffer is freed before the pointer is used, allowing for data corruption or remote code execution.

A stack-based buffer over-read vulnerability in nasm version 2.16 allows attackers to cause a denial of service (crash).

A stack-based buffer over-read in the disasm function in nasm 2.16 allows attackers to cause a denial of service.

In version 2.16rc0 of nasm, there is a null pointer dereference issue in the ieee_write_file function, which can lead to a program crash.