Logo
vulnerabilityCVE-2021-33454
Name
CVE-2021-33454
Source
NVD ( link)Debian ( link)
Description
An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in yasm_expr_get_intnum() in libyasm/expr.c.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
yasm
Patched

Vulnerability Rating#


5.5
CVSSv31

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
master
1.3.0
Patched
yocto
kirkstone
1.3.0+gitX
Not Affected
yocto
scarthgap
1.3.0+git
Patched

Resolved with patches#


yasm (buildroot:2025.02.x)

#
Title
Author
Resolve
1
Fix null-pointer-dereference in yasm_expr_get_intnum
dataisland <dataisland@outlook.com>
CVE-2021-33454

yasm (buildroot:master)

#
Title
Author
Resolve
1
Fix null-pointer-dereference in yasm_expr_get_intnum
dataisland <dataisland@outlook.com>
CVE-2021-33454

yasm (yocto:scarthgap)

#
Title
Author
Resolve
1
Fix null-pointer-dereference in yasm_expr_get_intnum (#244)
dataisland <dataisland@outlook.com>
CVE-2021-33454