CVE-2023-31973
MEDIUM 5.5EPSS 0.3%
yasm v1.3.0 was discovered to contain a use after free via the function expand_mmac_params at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy.
- CVSS v3.1 NVD
- 5.5 MEDIUM
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - CVSS v3.1 CNA
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - EPSS
- 0.31% chance of exploitation in the next 30 days, 22nd percentile
- Published
- 2023-05-09
- Updated
- 2024-08-02
Proof-of-concept exploits (1)
- yasm/yasm/issues/2071485★ · 2026-08-01