CVE-2022-46457 NASM v2.16 was discovered to contain a segmentation violation in the component ieee_write_file at /output/outieee.c.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Segmentation Fault Vulnerabilities in NASM Affect Remote Systems Two segmentation fault vulnerabilities have been identified in NASM versions 2.14.03, 2.15, and 2.16. CVE-2020-21528 allows remote attackers to cause a denial of service via crafted assembly files, while CVE-2022-46457 is related to a segmentation violation in ieee_write_file. Users of affected NASM versions are at risk. 2 sources 50