Approved changes feed: RSS · Atom

cpe:2.3:a:nasm:netwide_assembler:2.14.02:*:*:*:*:*:*:*

part: a version: 2.14.02 update: *

VendorNasm (c0fa9fe0-21a4-531e-ae0a-4f4ca4abd5df)
ProductNetwide Assembler (792ca598-ec50-5f59-a8f8-3fe51e4d0624)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/nasm purl2cpe 2026-06-01 10:11:58.891660
pkg:deb/ubuntu/nasm purl2cpe 2026-06-01 10:11:58.891662
pkg:github/netwide-assembler/nasm purl2cpe 2026-06-01 10:11:58.891663
pkg:nuget/nasm purl2cpe 2026-06-01 10:11:58.891664
pkg:rpm/fedora/nasm purl2cpe 2026-06-01 10:11:58.891666
pkg:rpm/opensuse/nasm purl2cpe 2026-06-01 10:11:58.891667

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-18780 vulnerable 2026-06-08 05:20:57.096819 Details available
A Use After Free vulnerability in function new_Token in asm/preproc.c in nasm 2.14.02 allows attackers to cause a denial of service via crafted nasm command.
Published: 2023-08-22T00:00:00.000Z
Updated: 2024-10-04T16:36:41.919Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-8343 vulnerable 2026-06-08 05:14:23.870738 Details available
In Netwide Assembler (NASM) 2.14.02, there is a use-after-free in paste_tokens in asm/preproc.c.
Published: 2019-02-15T07:00:00.000Z
Updated: 2024-09-16T18:33:18.676Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-20334 vulnerable 2026-06-08 05:13:40.456182 Details available
In Netwide Assembler (NASM) 2.14.02, stack consumption occurs in expr# functions in asm/eval.c. This potentially affects the relationships among expr0, expr1, expr2, expr3, expr4, expr5, and expr6 (and stdscan in asm/stdscan.c). This is similar to CVE-2019-6290 and CVE-2019-6291.
Published: 2020-01-04T06:43:42.000Z
Updated: 2024-08-05T02:39:09.727Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.