Skip to content

CVE-2023-31975

yasm v1.3.0 was discovered to contain a memory leak via the function yasm_intnum_copy at /libyasm...

3.3 LowFix availableDisputed

yasm v1.3.0 was discovered to contain a memory leak via the function yasm_intnum_copy at /libyasm/intnum.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: Low

Exploit likelihood

0.47%Up 0.4 points since May 10, 2023

What each source reports

NVD Score used 3.3

yasm v1.3.0 was discovered to contain a memory leak via the function yasm_intnum_copy at /libyasm/intnum.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy.

Record: CVE-2023-31975
CVSS 3.1: 3.3 LowCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Weakness: CWE-401
Updated: 2026-11-02

CVE List 3.3

yasm v1.3.0 was discovered to contain a memory leak via the function yasm_intnum_copy at /libyasm/intnum.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy.

Record: CVE-2023-31975
CVSS 3.1: 3.3 LowCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Weakness: CWE-401
Updated: 2026-11-02

EUVDEUVD-2023-36264 3.3

yasm v1.3.0 was discovered to contain a memory leak via the function yasm_intnum_copy at /libyasm/intnum.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy.

Record: EUVD-2023-36264
CVSS 3.1: 3.3 LowCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Updated: 2026-11-03

GitHub AdvisoriesGHSA-g56w-fm5h-cwrp 9.8

yasm v1.3.0 was discovered to contain a memory leak via the function yasm_intnum_copy at /libyasm...

yasm v1.3.0 was discovered to contain a memory leak via the function yasm_intnum_copy at /libyasm/intnum.c.

Record: GHSA-g56w-fm5h-cwrp
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-401
Updated: 2026-11-02

OSVAZL-26632 3.3

CVE-2023-31975 affecting package yasm for versions less than 1.3.0-14

yasm v1.3.0 was discovered to contain a memory leak via the function yasm_intnum_copy at /libyasm/intnum.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy.

Record: AZL-26632
CVSS 3.1: 3.3 LowCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVAZL-35383 3.3

CVE-2023-31975 affecting package yasm for versions less than 1.3.0-14

yasm v1.3.0 was discovered to contain a memory leak via the function yasm_intnum_copy at /libyasm/intnum.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy.

Record: AZL-35383
CVSS 3.1: 3.3 LowCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Updated: 2026-11-05

Show 9 moreShow less

OSV 3.3

yasm v1.3.0 was discovered to contain a memory leak via the function yasm_intnum_copy at /libyasm/intnum.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy.

Record: CVE-2023-31975
CVSS 3.1: 3.3 LowCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVDEBIAN-CVE-2023-31975 3.3

yasm v1.3.0 was discovered to contain a memory leak via the function yasm_intnum_copy at /libyasm/intnum.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy.

Record: DEBIAN-CVE-2023-31975
CVSS 3.1: 3.3 LowCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVOESA-2023-1543 3.3

yasm security update

Yasm is a complete rewrite of the NASM assembler under the “new” BSD License.

Security Fix(es):

yasm v1.3.0 was discovered to contain a memory leak via the function yasm_intnum_copy at /libyasm/intnum.c.(CVE-2023-31975)

Record: OESA-2023-1543
CVSS 3.1: 3.3 LowCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVOESA-2023-1544 3.3

yasm security update

Yasm is a complete rewrite of the NASM assembler under the “new” BSD License.

Security Fix(es):

yasm v1.3.0 was discovered to contain a memory leak via the function yasm_intnum_copy at /libyasm/intnum.c.(CVE-2023-31975)

Record: OESA-2023-1544
CVSS 3.1: 3.3 LowCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVOESA-2024-1062 3.3

yasm security update

Yasm is a complete rewrite of the NASM assembler under the “new” BSD License.

Security Fix(es):

yasm v1.3.0 was discovered to contain a memory leak via the function yasm_intnum_copy at /libyasm/intnum.c.(CVE-2023-31975)

Record: OESA-2024-1062
CVSS 3.1: 3.3 LowCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVOESA-2024-1064 3.3

yasm security update

Yasm is a complete rewrite of the NASM assembler under the “new” BSD License.

Security Fix(es):

yasm v1.3.0 was discovered to contain a memory leak via the function yasm_intnum_copy at /libyasm/intnum.c.(CVE-2023-31975)

Record: OESA-2024-1064
CVSS 3.1: 3.3 LowCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVOESA-2024-1131 3.3

yasm security update

Yasm is a complete rewrite of the NASM assembler under the “new” BSD License.

Security Fix(es):

yasm v1.3.0 was discovered to contain a memory leak via the function yasm_intnum_copy at /libyasm/intnum.c.(CVE-2023-31975)

Record: OESA-2024-1131
CVSS 3.1: 3.3 LowCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVOESA-2024-1132 3.3

yasm security update

Yasm is a complete rewrite of the NASM assembler under the “new” BSD License.

Security Fix(es):

yasm v1.3.0 was discovered to contain a memory leak via the function yasm_intnum_copy at /libyasm/intnum.c.(CVE-2023-31975)

Record: OESA-2024-1132
CVSS 3.1: 3.3 LowCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVROOT-OS-ALPINE-318-CVE-2023-31975 No score

CVE-2023-31975 in yasm - Patched by Root

Root has patched CVE-2023-31975 in the yasm package for Root:Alpine:3.18. Multiple fixed versions available.

Record: ROOT-OS-ALPINE-318-CVE-2023-31975
Updated: 2026-11-02

Affected products

yasm project yasm

Affected packages

Affected packages
Package	Affected	Fixed
`yasm` Azure Linux:2	before 1.3.0-14	1.3.0-14
`yasm` Azure Linux:3	before 1.3.0-14	1.3.0-14
`yasm` Debian:12	All versions, plus listed versions 1.3.0-41.3.0-51.3.0-61.3.0-71.3.0-8	None known
`yasm` Debian:13	All versions, plus listed versions 1.3.0-71.3.0-8	None known
`yasm` Debian:14	All versions, plus listed versions 1.3.0-71.3.0-8	None known
`yasm` openEuler:20.03-LTS-SP1	before 1.3.0-11.oe1	1.3.0-11.oe1
`yasm` openEuler:22.03-LTS	before 1.3.0-12.oe2203	1.3.0-12.oe2203
`yasm` openEuler:22.03-LTS-SP2	before 1.3.0-12.oe2203sp2	1.3.0-12.oe2203sp2
`yasm` openEuler:22.03-LTS-SP1	before 1.3.0-12.oe2203sp1	1.3.0-12.oe2203sp1
`yasm` openEuler:20.03-LTS-SP4	before 1.3.0-11.oe2003sp4	1.3.0-11.oe2003sp4
`yasm` openEuler:22.03-LTS-SP3	before 1.3.0-12.oe2203sp3	1.3.0-12.oe2203sp3
`yasm` Root:Alpine:3.18	before 1.3.0-r40071	1.3.0-r400711.3.0-r400731.3.0-r400721.3.0-r400741.3.0-r40075
`rootio-yasm` Root:Alpine:3.18	before 1.3.0-r40071	1.3.0-r400711.3.0-r400731.3.0-r400721.3.0-r400741.3.0-r40075

History

History
Recorded	Changed	Sources
Nov 5, 2026	facts	OSV
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-31975 is a low vulnerability (CVSS 3.3) in Yasm Project Yasm, published May 9, 2023. Its validity is disputed. EPSS puts the chance of exploitation in the next 30 days at 0.47%, the 40th percentile. Fixed in yasm 1.3.0-14.

References

Show 22 moreShow less