Logo
vulnerabilityCVE-2023-37732
Name
CVE-2023-37732
Source
NVD ( link)Debian ( link)
Description
Yasm v1.3.0.78 was found prone to NULL Pointer Dereference in /libyasm/intnum.c and /elf/elf.c, which allows the attacker to cause a denial of service via a crafted file.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
yasm
Patched

Vulnerability Ratings#


5.5
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
1.3.0
Not Affected
buildroot
master
1.3.0
Not Affected
yocto
kirkstone
1.3.0+gitX
Patched

Resolved with patches#


yasm (yocto:kirkstone)

#
Title
Author
Resolve
1
elf.c: Fix NULL deref on bad xsize expression (#234)
Peter Johnson <johnson.peter@gmail.com>
CVE-2023-37732

yasm (yocto:scarthgap)

#
Title
Author
Resolve
1
elf.c: Fix NULL deref on bad xsize expression (#234)
Peter Johnson <johnson.peter@gmail.com>
CVE-2023-37732