Approved changes feed: RSS · Atom

cpe:2.3:a:nasm:netwide_assembler:12.14:rc16:*:*:*:*:*:*

part: a version: 12.14 update: rc16

VendorNasm (c0fa9fe0-21a4-531e-ae0a-4f4ca4abd5df)
ProductNetwide Assembler (792ca598-ec50-5f59-a8f8-3fe51e4d0624)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/nasm purl2cpe 2026-06-01 10:11:58.685400
pkg:deb/ubuntu/nasm purl2cpe 2026-06-01 10:11:58.685401
pkg:github/netwide-assembler/nasm purl2cpe 2026-06-01 10:11:58.685403
pkg:nuget/nasm purl2cpe 2026-06-01 10:11:58.685404
pkg:rpm/fedora/nasm purl2cpe 2026-06-01 10:11:58.685406
pkg:rpm/opensuse/nasm purl2cpe 2026-06-01 10:11:58.685407

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-19755 vulnerable 2026-06-08 05:11:16.072961 Details available
There is an illegal address access at asm/preproc.c (function: is_mmacro) in Netwide Assembler (NASM) 2.14rc16 that will cause a denial of service (out-of-bounds array access) because a certain conversion can result in a negative integer.
Published: 2018-11-30T03:00:00.000Z
Updated: 2024-09-16T22:30:53.890Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19215 vulnerable 2026-06-08 05:11:15.478837 Details available
Netwide Assembler (NASM) 2.14rc16 has a heap-based buffer over-read in expand_mmac_params in asm/preproc.c for the special cases of the % and $ and ! characters.
Published: 2018-11-12T19:00:00.000Z
Updated: 2024-08-05T11:30:04.213Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19213 vulnerable 2026-06-08 05:11:15.476204 Details available
Netwide Assembler (NASM) through 2.14rc16 has memory leaks that may lead to DoS, related to nasm_malloc in nasmlib/malloc.c.
Published: 2018-11-12T19:00:00.000Z
Updated: 2024-09-16T18:29:28.647Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.