Approved changes feed: RSS · Atom

cpe:2.3:a:nasm:netwide_assembler:2.14.01rc5:*:*:*:*:*:*:*

part: a version: 2.14.01rc5 update: *

VendorNasm (c0fa9fe0-21a4-531e-ae0a-4f4ca4abd5df)
ProductNetwide Assembler (792ca598-ec50-5f59-a8f8-3fe51e4d0624)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/nasm purl2cpe 2026-06-01 10:11:58.891651
pkg:deb/ubuntu/nasm purl2cpe 2026-06-01 10:11:58.891653
pkg:github/netwide-assembler/nasm purl2cpe 2026-06-01 10:11:58.891655
pkg:nuget/nasm purl2cpe 2026-06-01 10:11:58.891656
pkg:rpm/fedora/nasm purl2cpe 2026-06-01 10:11:58.891657
pkg:rpm/opensuse/nasm purl2cpe 2026-06-01 10:11:58.891659

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-1000886 vulnerable 2026-06-08 05:10:26.187494 Details available
nasm version 2.14.01rc5, 2.15 contains a Buffer Overflow vulnerability in asm/stdscan.c:130 that can result in Stack-overflow caused by triggering endless macro generation, crash the program. This attack appear to be exploitable via a crafted nasm input file.
Published: 2018-12-20T20:00:00.000Z
Updated: 2024-09-17T01:26:18.927Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.