CVE-2022-44370
HIGHNASM < 2.16 - Heap Buffer Overflow in quote_for_pmake()
Title source: llmDescription
NASM v2.16 was discovered to contain a heap buffer overflow in the component quote_for_pmake() asm/nasm.c:856
References (2)
Core 2
Core References
Exploit, Issue Tracking, Vendor Advisory
https://bugzilla.nasm.us/show_bug.cgi?id=3392815
Third Party Advisory vendor-advisory
https://security.gentoo.org/glsa/202312-09
Scores
CVSS v3
7.8
EPSS
0.0044
EPSS Percentile
35.7%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CWE
CWE-787
Status
published
Products (2)
nasm/netwide_assembler
2.16 rc1
nasm/netwide_assembler
< 2.16
Published
Mar 29, 2023
Tracked Since
Feb 18, 2026