CVE-2023-31722

There exists a heap buffer overflow in nasm 2.16.02rc1 (GitHub commit: b952891).

There exists a heap buffer overflow in nasm 2.16.02rc1 (GitHub commit: b952891).

There exists a heap buffer overflow in nasm 2.16.02rc1 (GitHub commit: b952891).

There exists a heap buffer overflow in nasm 2.16.02rc1 (GitHub commit: b952891).

There exists a heap buffer overflow in nasm 2.16.02rc1 (GitHub commit: b952891).

There exists a heap buffer overflow in nasm 2.16.02rc1 (GitHub commit: b952891).

NASM is the Netwide Assembler, a free portable assembler for the Intel 80x86 microprocessor series, using primarily the traditional Intel instruction mnemonics and syntax. It also provides tools in RDOFF binary format, includes linker, library manager, loader, and information dump.

Security Fix(es):

There exists a heap buffer overflow in nasm 2.16.02rc1 (GitHub commit: b952891).(CVE-2023-31722)

There exists a heap buffer overflow in nasm 2.16.02rc1 (GitHub commit: b952891).

Daisy Chen discovered that NASM was vulnerable to a heap buffer overflow when handling certain input. An attacker could possibly use this issue to cause NASM to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2023-31722)

It was discovered that NASM incorrectly handled memory allocation. An attacker could possibly use this issue to cause NASM to use excessive resources, leading to a denial of service. This issue only affected Ubuntu 24.04 LTS. (CVE-2021-33452, CVE-2021-33450)