CVE-2023-29580

yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the component yasm_expr_create at /libyasm/expr.c.
References
Link Resource
https://github.com/yasm/yasm/issues/215 Exploit Issue Tracking Third Party Advisory
https://github.com/z1r00/fuzz_vuln/blob/main/yasm/segv/yasm_expr_create/readmd.md Exploit Third Party Advisory
https://github.com/yasm/yasm/issues/215 Exploit Issue Tracking Third Party Advisory
https://github.com/z1r00/fuzz_vuln/blob/main/yasm/segv/yasm_expr_create/readmd.md Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:yasm_project:yasm:1.3.0.55.g101bc:*:*:*:*:*:*:*

History

08 Feb 2025, 03:15

Type Values Removed Values Added
CWE CWE-653

21 Nov 2024, 07:57

Type Values Removed Values Added
References () https://github.com/yasm/yasm/issues/215 - Exploit, Issue Tracking, Third Party Advisory () https://github.com/yasm/yasm/issues/215 - Exploit, Issue Tracking, Third Party Advisory
References () https://github.com/z1r00/fuzz_vuln/blob/main/yasm/segv/yasm_expr_create/readmd.md - Exploit, Third Party Advisory () https://github.com/z1r00/fuzz_vuln/blob/main/yasm/segv/yasm_expr_create/readmd.md - Exploit, Third Party Advisory

21 Apr 2023, 14:52

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.5
CWE NVD-CWE-noinfo
References (MISC) https://github.com/yasm/yasm/issues/215 - (MISC) https://github.com/yasm/yasm/issues/215 - Exploit, Issue Tracking, Third Party Advisory
References (MISC) https://github.com/z1r00/fuzz_vuln/blob/main/yasm/segv/yasm_expr_create/readmd.md - (MISC) https://github.com/z1r00/fuzz_vuln/blob/main/yasm/segv/yasm_expr_create/readmd.md - Exploit, Third Party Advisory
First Time Yasm Project yasm
Yasm Project
CPE cpe:2.3:a:yasm_project:yasm:1.3.0.55.g101bc:*:*:*:*:*:*:*

12 Apr 2023, 13:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-04-12 13:15

Updated : 2025-02-08 03:15


NVD link : CVE-2023-29580

Mitre link : CVE-2023-29580

CVE.ORG link : CVE-2023-29580


JSON object : View

Products Affected

yasm_project

  • yasm
CWE
NVD-CWE-noinfo CWE-653

Improper Isolation or Compartmentalization