CVE-2021-33450 : An issue was discovered in NASM version 2.16rc0. There are memory leaks in nasm

An issue was discovered in NASM version 2.16rc0. There are memory leaks in nasm_calloc() in nasmlib/alloc.c.

Published 2022-07-26 13:15:09

Updated 2022-08-02 13:38:22

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2021-33450

Nasm » Netwide Assembler » Version: 2.16 Update RC0
cpe:2.3:a:nasm:netwide_assembler:2.16:rc0:*:*:*:*:*:*
Matching versions

EPSS FAQ

0.06%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 21 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H	1.8	3.6	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE-401 Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.

Assigned by: nvd@nist.gov (Primary)

https://bugzilla.nasm.us/show_bug.cgi?id=3392758

3392758 – AddressSanitizer: 1 memory leaks of nasm_calloc()
Exploit;Issue Tracking;Third Party Advisory
https://gist.github.com/Clingto/bb632c0c463f4b2c97e4f65f751c5e6d

Minimum information for the vulnerability covered by 32 CVEs. · GitHub
Third Party Advisory

CVEs referencing this url

Jump to