CVE-2018-19214: Out-of-bounds Read

November 12, 2018 (updated July 13, 2020)

Netwide Assembler (NASM) rc15 has a heap-based buffer over-read in expand_mmac_params in asm/preproc.c for insufficient input.

References

lists.opensuse.org/opensuse-security-announce/2020-07/msg00015.html
lists.opensuse.org/opensuse-security-announce/2020-07/msg00017.html
bugzilla.nasm.us/show_bug.cgi?id=3392521
nvd.nist.gov/vuln/detail/CVE-2018-19214
repo.or.cz/nasm.git/commit/661f723d39e03ca6eb05d7376a43ca33db478354

Code Behaviors & Features

Detect and mitigate CVE-2018-19214 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →