CVE-2023-31724
yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function...
yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function do_directive at /nasm/nasm-pp.c.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function do_directive at /nasm/nasm-pp.c.
- Record
CVE-2023-31724- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
CVE List
yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function do_directive at /nasm/nasm-pp.c.
- Record
CVE-2023-31724- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
EUVDEUVD-2023-36015
yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function do_directive at /nasm/nasm-pp.c.
- Record
EUVD-2023-36015- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-w7v9-qh7m-8pv3
yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function...
yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function do_directive at /nasm/nasm-pp.c.
- Record
GHSA-w7v9-qh7m-8pv3- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVAZL-26737
CVE-2023-31724 affecting package yasm 1.3.0-17
yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function do_directive at /nasm/nasm-pp.c.
- Record
AZL-26737- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVAZL-35385
CVE-2023-31724 affecting package yasm 1.3.0-17
yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function do_directive at /nasm/nasm-pp.c.
- Record
AZL-35385- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-05
OSV
yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function do_directive at /nasm/nasm-pp.c.
- Record
CVE-2023-31724- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2023-31724
yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function do_directive at /nasm/nasm-pp.c.
- Record
DEBIAN-CVE-2023-31724- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2023-31724
yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function do_directive at /nasm/nasm-pp.c.
- Record
UBUNTU-CVE-2023-31724- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
yasmAzure Linux:2 |
through 1.3.0-17 | None known |
yasmAzure Linux:3 |
through 1.3.0-17 | None known |
yasmDebian:12 |
All versions, plus listed versions 1.3.0-41.3.0-51.3.0-61.3.0-71.3.0-8 |
None known |
yasmDebian:13 |
All versions, plus listed versions 1.3.0-71.3.0-8 |
None known |
yasmDebian:14 |
All versions, plus listed versions 1.3.0-71.3.0-8 |
None known |
yasmUbuntu:16.04:LTS |
All versions, plus listed versions 1.3.0-2 |
None known |
yasmUbuntu:18.04:LTS |
All versions, plus listed versions 1.3.0-21.3.0-2build1 |
None known |
yasmUbuntu:20.04:LTS |
All versions, plus listed versions 1.3.0-2build11.3.0-2ubuntu1 |
None known |
yasmUbuntu:22.04:LTS |
All versions, plus listed versions 1.3.0-2.1 |
None known |
yasmUbuntu:24.04:LTS |
All versions, plus listed versions 1.3.0-4 |
None known |
yasmUbuntu:25.10 |
All versions, plus listed versions 1.3.0-51.3.0-7 |
None known |
yasmUbuntu:26.10 |
All versions, plus listed versions 1.3.0-8 |
None known |
yasmUbuntu:26.04:LTS |
All versions, plus listed versions 1.3.0-71.3.0-8 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-31724 is a high vulnerability (CVSS 7.8) in Yasm Project Yasm, published May 17, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.33%, the 26th percentile. No source names a fixed version.
References
github.com/yasm/yasm/issues/222
nvd.nist.gov/vuln/detail/CVE-2023-31724
security-tracker.debian.org/tracker/CVE-2023-31724
ubuntu.com/security/CVE-2023-31724
cve.org/CVERecord?id=CVE-2023-31724