CVE-2026-6067

Description

A heap buffer overflow vulnerability exists in the Netwide Assembler (NASM) due to a lack of bounds checking in the obj_directive() function. This vulnerability can be exploited by a user assembling a malicious .asm file, potentially leading to heap memory corruption, denial of service (crash), and arbitrary code execution.

PUBLISHED Reserved 2026-04-10 | Published 2026-04-10 | Updated 2026-04-10 | Assigner certcc

Problem types

CWE-787: Out-of-bounds Write

Product status

References

github.com/netwide-assembler/nasm/issues/203

cve.org (CVE-2026-6067)

nvd.nist.gov (CVE-2026-6067)

Download JSON