PT-2022-10250
CVE-2021-33454
·
Published
2022-07-26
·
Updated
2026-09-29
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
yasm version 1.3.0
Description
An issue was discovered in yasm. There is a NULL pointer dereference in the
yasm expr get intnum() function in the libyasm/expr.c file.Recommendations
For yasm version 1.3.0, consider avoiding the use of the
yasm expr get intnum() function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾