Approved changes feed: RSS · Atom

cpe:2.3:a:nasm:netwide_assembler:2.14.0:rc11:*:*:*:*:*:*

part: a version: 2.14.0 update: rc11

VendorNasm (c0fa9fe0-21a4-531e-ae0a-4f4ca4abd5df)
ProductNetwide Assembler (792ca598-ec50-5f59-a8f8-3fe51e4d0624)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/nasm purl2cpe 2026-06-01 10:11:58.891701
pkg:deb/ubuntu/nasm purl2cpe 2026-06-01 10:11:58.891702
pkg:github/netwide-assembler/nasm purl2cpe 2026-06-01 10:11:58.891703
pkg:nuget/nasm purl2cpe 2026-06-01 10:11:58.891705
pkg:rpm/fedora/nasm purl2cpe 2026-06-01 10:11:58.891706
pkg:rpm/opensuse/nasm purl2cpe 2026-06-01 10:11:58.891707

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-16517 vulnerable 2026-06-08 05:11:04.981217 Details available
asm/labels.c in Netwide Assembler (NASM) is prone to NULL Pointer Dereference, which allows the attacker to cause a denial of service via a crafted file.
Published: 2018-09-06T23:00:00.000Z
Updated: 2024-08-05T10:24:32.767Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1000667 vulnerable 2026-06-08 05:10:25.950983 Details available
NASM nasm-2.13.03 nasm- 2.14rc15 version 2.14rc15 and earlier contains a memory corruption (crashed) of nasm when handling a crafted file due to function assemble_file(inname, depend_ptr) at asm/nasm.c:482. vulnerability in function assemble_file(inname, depend_ptr) at asm/nasm.c:482. that can result in aborting/crash nasm program. This attack appear to be exploitable via a specially crafted asm file..
Published: 2018-09-06T17:00:00.000Z
Updated: 2024-08-05T12:40:47.960Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.