Approved changes feed: RSS · Atom

cpe:2.3:a:nasm:netwide_assembler:2.17:rc0:*:*:*:*:*:*

part: a version: 2.17 update: rc0

VendorNasm (c0fa9fe0-21a4-531e-ae0a-4f4ca4abd5df)
ProductNetwide Assembler (792ca598-ec50-5f59-a8f8-3fe51e4d0624)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/nasm purl2cpe 2026-06-01 10:11:58.931650
pkg:deb/ubuntu/nasm purl2cpe 2026-06-01 10:11:58.931652
pkg:github/netwide-assembler/nasm purl2cpe 2026-06-01 10:11:58.931653
pkg:nuget/nasm purl2cpe 2026-06-01 10:11:58.931654
pkg:rpm/fedora/nasm purl2cpe 2026-06-01 10:11:58.931656
pkg:rpm/opensuse/nasm purl2cpe 2026-06-01 10:11:58.931657

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-8846 vulnerable 2026-06-08 07:45:21.307674 NASM Netwide Assember parser.c parse_line stack-based overflow
MEDIUM (5.3)
A vulnerability has been found in NASM Netwide Assember 2.17rc0. Affected is the function parse_line of the file parser.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.
Published: 2025-08-11T12:32:07.575Z
Updated: 2025-08-11T19:41:08.735Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8845 vulnerable 2026-06-08 07:45:21.307081 NASM Netwide Assember nasm.c assemble_file stack-based overflow
MEDIUM (5.3)
A vulnerability was identified in NASM Netwide Assember 2.17rc0. This issue affects the function assemble_file of the file nasm.c. The manipulation leads to stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.
Published: 2025-08-11T12:02:08.301Z
Updated: 2025-08-12T13:43:32.950Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8844 vulnerable 2026-06-08 07:45:21.306702 NASM Netwide Assember preproc.c parse_smacro_template null pointer dereference
LOW (3.3)
A vulnerability was determined in NASM Netwide Assember 2.17rc0. This vulnerability affects the function parse_smacro_template of the file preproc.c. The manipulation leads to null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.
Published: 2025-08-11T11:32:08.340Z
Updated: 2025-08-11T12:12:07.494Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8843 vulnerable 2026-06-08 07:45:21.306281 NASM Netwide Assember outmacho.c macho_no_dead_strip heap-based overflow
MEDIUM (5.3)
A vulnerability was found in NASM Netwide Assember 2.17rc0. This affects the function macho_no_dead_strip of the file outmacho.c. The manipulation leads to heap-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.
Published: 2025-08-11T11:02:09.017Z
Updated: 2025-08-11T12:33:44.615Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8842 vulnerable 2026-06-08 07:45:21.305652 NASM Netwide Assember preproc.c do_directive use after free
MEDIUM (5.3)
A vulnerability has been found in NASM Netwide Assember 2.17rc0. Affected by this issue is the function do_directive of the file preproc.c. The manipulation leads to use after free. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.
Published: 2025-08-11T10:32:09.151Z
Updated: 2025-08-11T12:34:33.576Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.