Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A heap buffer overflow vulnerability exists in the Netwide Assembler (NASM) due to a lack of bounds checking in the obj_directive() function. This vulnerability can be exploited by a user assembling a malicious .asm file, potentially leading to heap memory corruption, denial of service (crash), and arbitrary code execution.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-04-11 | 1 | Disclosure1 |
| 2026-06-07 | 1 | Patch1 |
CVE-2026-6067 A heap buffer overflow vulnerability exists in the Netwide Assembler (NASM) due to a lack of bounds checking in the obj_directive() function. This vulnerability can be … https://www.cve.org/CVERecord?id=CVE-2026-6067
Post summary
The text announces a heap buffer overflow vulnerability in NASM (CVE‑2026‑6067) with a brief technical description, but offers no information on exploitation, patches, or PoC.
Fedora has issued security updates for libssh2 and NASM to fix a remotely triggerable heap overflow and arbitrary code execution bugs tracked as CVE-2026-7598 and CVE-2026-6067, according to Fedora Release Engineering changelogs. https://threatcluster.io/cluster/critical-vulnerabilities-in-fedora-libssh2-and-nasm-addresse-f9f1afba
Post summary
The text announces that Fedora has released patches for CVE‑2026‑7598 and CVE‑2026‑6067, describing them as a heap overflow and arbitrary code execution bug, but provides no evidence of active exploitation or proof‑of‑concept.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | nasm | netwide_assembler | 3.02 | - | - |