CVE-2020-21686

    Dashboard / Vulnerabilities / CVE-2020-21686

    CVE-2020-21686

    Published: 22 Aug 2023Last Modified: 8 Sept 2026

    Summary:

    Details: A stack-use-after-scope issue discovered in expand_mmac_params function in preproc.c in nasm before 2.15.04 allows remote attackers to cause a denial of service via crafted asm file.

    References: https://bugzilla.nasm.us/show_bug.cgi?id=3392643

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -717348304378b9148e3e87d41bf54f67d36dee72

    Affected versions

    nasm-2.15.04rc6
    nasm-2.15.04rc5
    nasm-2.15.04rc4
    nasm-2.15.04rc3
    nasm-2.15.04rc2
    nasm-2.15.04rc1
    nasm-2.15.03
    nasm-2.15.03rc8
    nasm-2.15.03rc7
    nasm-2.15.03rc6
    nasm-2.15.03rc5
    nasm-2.15.03rc4
    nasm-2.15.03rc3
    nasm-2.15.03rc2
    nasm-2.15.03rc1
    nasm-2.15.02
    nasm-2.15.02rc2
    nasm-2.15.02rc1
    nasm-2.15.01
    nasm-2.15

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2020-21686 | CVE-DB