What’s Vulnerable › Vulnerabilities

CVE-2018-19755

• Severity: medium (CVSS 5.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-11-30 · updated 2026-06-17
• Weakness: CWE-20

Description

There is an illegal address access at asm/preproc.c (function: is_mmacro) in Netwide Assembler (NASM) 2.14rc16 that will cause a denial of service (out-of-bounds array access) because a certain conversion can result in a negative integer.

Affected products

• NASM Netwide Assember: 12.14-rc16

References

• https://bugzilla.nasm.us/show_bug.cgi?id=3392528
• https://repo.or.cz/nasm.git/commit/3079f7966dbed4497e36d5067cbfd896a90358cb
• https://bugzilla.nasm.us/show_bug.cgi?id=3392528
• https://repo.or.cz/nasm.git/commit/3079f7966dbed4497e36d5067cbfd896a90358cb

Get alerted when CVE-2018-19755 or the next vulnerability affects your stack