CVE-2023-49555: Yasm Project Yasm

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expand_smacro function in the modules/preprocs/nasm/nasm-pp.c component.

Affected products

• Yasm Project Yasm: version 1.3.0.86.g9def only

Published 2024-01-03. Last modified 2026-06-17.