Cyber Resilience

CVE-2023-29581

Yasm Project Yasm 1.3.0.55.g101bc

Public PoC
Published
12 April 2023
Modified
21 November 2024
CVSS Score v3.1 5.5
Click a component to see what it means
Raw vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS Score 0.0034 27th percentile
Risk Priority 43 floored blend · peak EPSS

Summary

CVE-2023-29581 is a medium-severity an unspecified weakness vulnerability in Yasm Project Yasm. Its CVSS base score is 5.5 (Medium).

Operationally, ranked at the 27th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

EU & UK References

Vulnerability Data

yasm 1.3.0.55.g101bc has a segmentation violation in the function delete_Token at modules/preprocs/nasm/nasm-pp.c. NOTE: although a libyasm application could become unavailable if this were exploited, the vendor's position is that there is no security relevance because there is either supposed to…

more

be input validation before data reaches libyasm, or a sandbox in which the application runs.

CWE(s)
NVD-CWE-noinfo

Related Threats

CVEs Like This One

CVE-2023-29579Same product: Yasm Project Yasm
CVE-2023-29580Same product: Yasm Project Yasm
CVE-2023-29583Same product: Yasm Project Yasm
CVE-2023-31723Same product: Yasm Project Yasm
CVE-2023-49557Same product: Yasm Project Yasm
CVE-2024-22653Same product: Yasm Project Yasm
CVE-2023-37732Same product: Yasm Project Yasm
CVE-2023-49558Same product: Yasm Project Yasm
CVE-2023-30402Same product: Yasm Project Yasm
CVE-2023-31975Same product: Yasm Project Yasm

Affected Assets

yasm project
yasm
1.3.0.55.g101bc

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References