CVE Catalog

CVE-2023-38665

MediumCVSS 5.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.29%

20th percentile - higher than 20% of all known CVEs

Summary

In version 2.16rc0 of nasm, there is a null pointer dereference issue in the ieee_write_file function, which can lead to a program crash.

Risk Assessment

Attackers can exploit this vulnerability to cause a denial of service, impacting system availability.

Recommendation

It is recommended to update the nasm tool to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Null pointer dereference in ieee_write_file in nasm 2.16rc0 allows attackers to cause a denial of service (crash).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS