CVE-2018-10254: Nasm Netwide Assembler

High severity, CVSS 7.8. EPSS: 1.4% chance of exploitation in the next 30 days.

Netwide Assembler (NASM) 2.13 has a stack-based buffer over-read in the disasm function of the disasm/disasm.c file. Remote attackers could leverage this vulnerability to cause a denial of service or possibly have unspecified other impact via a crafted ELF file.

Affected products

• Nasm Netwide Assembler: version 2.13 only

Published 2018-04-21. Last modified 2026-06-17.