Approved changes feed: RSS · Atom

cpe:2.3:a:nasm:netwide_assembler:2.15:*:*:*:*:*:*:*

part: a version: 2.15 update: *

VendorNasm (c0fa9fe0-21a4-531e-ae0a-4f4ca4abd5df)
ProductNetwide Assembler (792ca598-ec50-5f59-a8f8-3fe51e4d0624)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/nasm purl2cpe 2026-06-01 10:11:58.904776
pkg:deb/ubuntu/nasm purl2cpe 2026-06-01 10:11:58.904777
pkg:github/netwide-assembler/nasm purl2cpe 2026-06-01 10:11:58.904779
pkg:nuget/nasm purl2cpe 2026-06-01 10:11:58.904780
pkg:rpm/fedora/nasm purl2cpe 2026-06-01 10:11:58.904782
pkg:rpm/opensuse/nasm purl2cpe 2026-06-01 10:11:58.904783

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-21528 vulnerable 2026-06-08 05:22:30.871662 Details available
A Segmentation Fault issue discovered in in ieee_segment function in outieee.c in nasm 2.14.03 and 2.15 allows remote attackers to cause a denial of service via crafted assembly file.
Published: 2023-08-22T00:00:00.000Z
Updated: 2024-08-04T14:30:33.246Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1000886 vulnerable 2026-06-08 05:10:26.188190 Details available
nasm version 2.14.01rc5, 2.15 contains a Buffer Overflow vulnerability in asm/stdscan.c:130 that can result in Stack-overflow caused by triggering endless macro generation, crash the program. This attack appear to be exploitable via a crafted nasm input file.
Published: 2018-12-20T20:00:00.000Z
Updated: 2024-09-17T01:26:18.927Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.