CVE-2022-44370

HIGH EPSS 35.6%

Published Mar 29, 20233y ago · Modified Jun 17, 20261w ago

7.8 CVSS 3.1

High

Published Mar 29, 2023 3y ago

Last Modified Jun 17, 2026 1w ago

Description

NASM v2.16 was discovered to contain a heap buffer overflow in the component quote_for_pmake() asm/nasm.c:856

Base Score

7.8

Exploitability

1.8

Impact

5.9

Vector string

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector Local

Attack Complexity Low

Privileges Required None

User Interaction Required

Scope Unchanged

Confidentiality High

Integrity High

Availability High

EPSS Exploit Probability

35.6% percentile

Exploit & Patch Status

Public Exploit Known

No Patch Available

CWE-787 Out-of-bounds Write Memory Safety

Vendor	Product	Version	Range
nasm	netwide_assembler	*	<2.16
nasm	netwide_assembler	2.16	any

bugzilla.nasm.us https://bugzilla.nasm.us/show_bug.cgi?id=3392815

ExploitIssue TrackingVendor Advisory
security.gentoo.org https://security.gentoo.org/glsa/202312-09

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.