Netwide Assembler

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:nasm:netwide_assembler:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNasm (c0fa9fe0-21a4-531e-ae0a-4f4ca4abd5df)
ProductNetwide Assembler (792ca598-ec50-5f59-a8f8-3fe51e4d0624)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/nasm purl2cpe 2026-06-01 10:11:58.647192
pkg:deb/ubuntu/nasm purl2cpe 2026-06-01 10:11:58.647194
pkg:github/netwide-assembler/nasm purl2cpe 2026-06-01 10:11:58.647196
pkg:nuget/nasm purl2cpe 2026-06-01 10:11:58.647197
pkg:rpm/fedora/nasm purl2cpe 2026-06-01 10:11:58.647198
pkg:rpm/opensuse/nasm purl2cpe 2026-06-01 10:11:58.647200

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-44370 vulnerable 2026-06-08 05:49:35.445149 Details available
NASM v2.16 was discovered to contain a heap buffer overflow in the component quote_for_pmake() asm/nasm.c:856
Published: 2023-03-29T00:00:00.000Z
Updated: 2024-08-03T13:54:02.572Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29654 vulnerable 2026-06-08 05:42:48.735205 Details available
Buffer overflow vulnerability in quote_for_pmake in asm/nasm.c in nasm before 2.15.05 allows attackers to cause a denial of service via crafted file.
Published: 2023-08-22T00:00:00.000Z
Updated: 2024-10-03T14:36:33.687Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-21686 vulnerable 2026-06-08 05:22:31.014559 Details available
A stack-use-after-scope issue discovered in expand_mmac_params function in preproc.c in nasm before 2.15.04 allows remote attackers to cause a denial of service via crafted asm file.
Published: 2023-08-22T00:00:00.000Z
Updated: 2024-10-07T15:09:12.200Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-18974 vulnerable 2026-06-08 05:20:57.136653 Details available
Buffer Overflow in Netwide Assembler (NASM) v2.15.xx allows attackers to cause a denial of service via 'crc64i' in the component 'nasmlib/crc64'. This issue is different than CVE-2019-7147.
Published: 2021-08-25T15:54:04.000Z
Updated: 2024-08-04T14:08:30.435Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6291 vulnerable 2026-06-08 05:14:10.461593 Details available
An issue was discovered in the function expr6 in eval.c in Netwide Assembler (NASM) through 2.14.02. There is a stack exhaustion problem caused by the expr6 function making recursive calls to itself in certain scenarios involving lots of '!' or '+' or '-' characters. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted asm file.
Published: 2019-01-15T00:00:00.000Z
Updated: 2024-09-16T23:45:29.320Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6290 vulnerable 2026-06-08 05:14:10.461208 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14248 vulnerable 2026-06-08 05:12:54.330779 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19216 vulnerable 2026-06-08 05:11:15.480784 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16517 vulnerable 2026-06-08 05:11:04.978860 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1000667 vulnerable 2026-06-08 05:10:25.948828 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-7177 vulnerable 2026-06-08 04:51:05.836676 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.