CVE-2008-2719: Nasm Netwide Assembler

Medium severity, CVSS 6.8. EPSS: 10.5% chance of exploitation in the next 30 days.

Off-by-one error in the ppscan function (preproc.c) in Netwide Assembler (NASM) 2.02 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted file that triggers a stack-based buffer overflow.

Affected products

• Nasm Netwide Assembler: version 2.02 only

Published 2008-06-16. Last modified 2026-06-16.