yocto ▾
›
master ▾
›
vulnerability
›
CVE-2026-6069
Component Overview
Vulnerability Overview
Name
CVE-2026-6069
Source
NVD (
link
)
Debian (
link
)
Description
NASM’s disasm() function contains a stack based buffer overflow when formatting disassembly output, allowing an attacker triggered out-of-bounds write when `slen` exceeds the buffer capacity.
CWEs
CWE-787
Published Date
Apr 10, 2026
Updated Date
Jun 17, 2026
Workaround
-
Advisories
https://github.com/netwide-assembler/nasm/issues/217
Exploit
Analysis
#
Affected Component
Analysis
nasm
Exploitable
Vulnerability Ratings
#
7.5
CVSSv31
NaN
other
Others affected components
#
Name
Project
Project Version
Version
Status
nasm
openwrt
master
2.16.01-r1
Not Affected
nasm
openwrt
openwrt-25.12
2.16.01-r1
Not Affected
nasm
yocto
kirkstone
2.15.05
Not Affected
nasm
yocto
scarthgap
2.16.03
Not Affected