CVE-2023-31973

MEDIUM

yasm <1.3.0 - Use After Free

Title source: llm

Description

yasm v1.3.0 was discovered to contain a use after free via the function expand_mmac_params at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy.

References (1)

[Exploit, Issue Tracking] https://github.com/yasm/yasm/issues/207

Scores

CVSS v3 5.5

EPSS 0.0003

EPSS Percentile 8.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Classification

CWE

CWE-401 CWE-590

Status published

Affected Products (1)

tortall/yasm

Timeline

Published May 09, 2023

Tracked Since Feb 18, 2026