Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2026-6068

CVE-2026-6068

Description

NASM contains a heap use after free vulnerability in response file (-@) processing where a dangling pointer to freed memory is stored in the global depend_file and later dereferenced, as the response-file buffer is freed before the pointer is used, allowing for data corruption or remote code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NASM NASM

  • nasm-3.02rc5affected

References