NASM contains a heap use after free vulnerability in response file (-@) processing where a dangling pointer to freed memory is stored in the global depend_file and later dereferenced, as the response-file buffer is freed before the pointer is used, allowing for data corruption or unexpected behavior.
References
| Link | Resource |
|---|---|
| https://github.com/netwide-assembler/nasm/issues/222 | Exploit Issue Tracking |
Configurations
History
16 Apr 2026, 19:48
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Nasm netwide Assembler
Nasm |
|
| CWE | CWE-416 | |
| CPE | cpe:2.3:a:nasm:netwide_assembler:3.02:rc5:*:*:*:*:*:* | |
| References | () https://github.com/netwide-assembler/nasm/issues/222 - Exploit, Issue Tracking |
10 Apr 2026, 16:16
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
10 Apr 2026, 14:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-04-10 14:16
Updated : 2026-04-16 19:48
NVD link : CVE-2026-6068
Mitre link : CVE-2026-6068
CVE.ORG link : CVE-2026-6068
JSON object : View
Products Affected
nasm
- netwide_assembler
CWE
CWE-416
Use After Free