Logo
›
›vulnerability›CVE-2026-6068
Name
CVE-2026-6068
Source
NVD ( link)Debian ( link)
Description
NASM contains a heap use after free vulnerability in response file (-@) processing where a dangling pointer to freed memory is stored in the global depend_file and later dereferenced, as the response-file buffer is freed before the pointer is used, allowing for data corruption or remote code execution.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
nasm
Exploitable

Vulnerability Ratings#


9.6
CVSSv31
6.5
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
openwrt
master
2.16.01-r1
Not Affected
openwrt
openwrt-25.12
2.16.01-r1
Not Affected
yocto
kirkstone
2.15.05
Not Affected
yocto
scarthgap
2.16.03
Not Affected