A heap buffer overflow vulnerability exists in the Netwide Assembler (NASM) due to a lack of bounds checking in the obj_directive() function. This vulnerability can be exploited by a user assembling a malicious .asm file, potentially leading to heap memory corruption, denial of service (crash), and arbitrary code execution.
References
| Link | Resource |
|---|---|
| https://github.com/netwide-assembler/nasm/issues/203 | Exploit Issue Tracking |
Configurations
History
23 Apr 2026, 18:34
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
16 Apr 2026, 19:49
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Nasm netwide Assembler
Nasm |
|
| CWE | CWE-787 | |
| CPE | cpe:2.3:a:nasm:netwide_assembler:3.02:rc5:*:*:*:*:*:* | |
| References | () https://github.com/netwide-assembler/nasm/issues/203 - Exploit, Issue Tracking |
10 Apr 2026, 16:16
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
10 Apr 2026, 14:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-04-10 14:16
Updated : 2026-04-23 18:34
NVD link : CVE-2026-6067
Mitre link : CVE-2026-6067
CVE.ORG link : CVE-2026-6067
JSON object : View
Products Affected
nasm
- netwide_assembler
CWE
CWE-787
Out-of-bounds Write