CVE-2023-30402

YASM v1.3.0 was discovered to contain a heap overflow via the function handle_dot_label at /nasm/nasm-token.re

published April 25, 2023

CVSS
—
EPSS
0%
Percentile
20.5
In the wild
Unconfirmed
What it is

YASM v1.3.0 was discovered to contain a heap overflow via the function handle_dot_label at /nasm/nasm-token.re. Note: This has been disputed by third parties who argue this is a bug and not a security issue because yasm is a standalone program not designed to run untrusted code.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00291 · 20.5th percentile
Published
2023-04-25T00:00Z
EPSS history
Timeline
  • 25 APR 00:00Z
    YASM v1.3.0 was discovered to contain a heap overflow via the function handle_dot_label at /nasm/nasm-token.re
    cvelistv5