CVE-2018-8881

Name of the Vulnerable Software and Affected Versions Netwide Assembler (NASM) version 2.13.02rc2

Description The issue is related to a heap-based buffer over-read in the tokenize function located in asm/preproc.c, which occurs due to an unterminated string.

Recommendations For Netwide Assembler (NASM) version 2.13.02rc2, consider avoiding the use of unterminated strings in the tokenize function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.