Approved changes feed: RSS · Atom

cpe:2.3:a:tortall:yasm:1.3.0:*:*:*:*:*:*:*

part: a version: 1.3.0 update: *

VendorTortall (1246fcda-f836-5398-b2b2-efc276b1a4f4)
ProductYasm (a1be1317-a7b8-5da3-9713-2b0d37298e49)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/yasm purl2cpe 2026-06-01 10:17:18.382217
pkg:deb/ubuntu/yasm purl2cpe 2026-06-01 10:17:18.382220
pkg:github/yasm/yasm purl2cpe 2026-06-01 10:17:18.382223
pkg:rpm/fedora/yasm purl2cpe 2026-06-01 10:17:18.382226
pkg:rpm/opensuse/yasm purl2cpe 2026-06-01 10:17:18.382229

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-51258 vulnerable 2026-06-08 06:16:17.302624 Details available
A memory leak issue discovered in YASM v.1.3.0 allows a local attacker to cause a denial of service via the new_Token function in the modules/preprocs/nasm/nasm-pp:1512.
Published: 2024-01-18T00:00:00.000Z
Updated: 2024-08-02T22:32:09.170Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31974 vulnerable 2026-06-08 06:04:43.619608 Details available
yasm v1.3.0 was discovered to contain a use after free via the function error at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy.
Published: 2023-05-09T00:00:00.000Z
Updated: 2025-01-28T19:15:09.855Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31973 vulnerable 2026-06-08 06:04:43.619095 Details available
yasm v1.3.0 was discovered to contain a use after free via the function expand_mmac_params at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy.
Published: 2023-05-09T00:00:00.000Z
Updated: 2024-08-02T15:03:28.667Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31972 vulnerable 2026-06-08 06:04:43.618668 Details available
yasm v1.3.0 was discovered to contain a use after free via the function pp_getline at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy.
Published: 2023-05-09T00:00:00.000Z
Updated: 2025-01-29T18:35:12.364Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33468 vulnerable 2026-06-08 05:32:11.467593 Details available
An issue was discovered in yasm version 1.3.0. There is a use-after-free in error() in modules/preprocs/nasm/nasm-pp.c.
Published: 2022-07-26T12:52:14.000Z
Updated: 2024-08-03T23:50:42.969Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33467 vulnerable 2026-06-08 05:32:11.467240 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33466 vulnerable 2026-06-08 05:32:11.466988 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33465 vulnerable 2026-06-08 05:32:11.466751 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33464 vulnerable 2026-06-08 05:32:11.466508 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33463 vulnerable 2026-06-08 05:32:11.466162 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33462 vulnerable 2026-06-08 05:32:11.465913 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33461 vulnerable 2026-06-08 05:32:11.465657 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33460 vulnerable 2026-06-08 05:32:11.465406 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33459 vulnerable 2026-06-08 05:32:11.465157 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33458 vulnerable 2026-06-08 05:32:11.464895 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33457 vulnerable 2026-06-08 05:32:11.464539 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33456 vulnerable 2026-06-08 05:32:11.464162 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33455 vulnerable 2026-06-08 05:32:11.463863 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33454 vulnerable 2026-06-08 05:32:11.463483 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.