CVE-2018-20538: Nasm Netwide Assembler

Medium severity, CVSS 5.5. EPSS: 0.8% chance of exploitation in the next 30 days.

There is a use-after-free at asm/preproc.c (function pp_getline) in Netwide Assembler (NASM) 2.14rc16 that will cause a denial of service during certain finishes tests.

Affected products

• Nasm Netwide Assembler: version 2.14.0 only

Published 2018-12-28. Last modified 2026-06-17.