Critical NASM Vulnerabilities Affecting Ubuntu 24.04 LTS

Severity: High (Score: 74.0)

Sources: Ubuntu, Linuxsecurity

Summary

Daisy Chen discovered multiple vulnerabilities in NASM, including a heap buffer overflow (CVE-2023-31722) that could allow attackers to crash the software or execute arbitrary code. Additionally, NASM's improper memory allocation could lead to excessive resource usage, causing denial of service (CVE-2021-33452, CVE-2021-33450). These vulnerabilities specifically impact Ubuntu 24.04 LTS, with the potential for denial of service and resource exhaustion. Users are advised to update their systems to mitigate these risks. The vulnerabilities were disclosed on May 7, 2026, and are part of a broader set of security issues affecting NASM. Key Points: • NASM vulnerabilities could lead to denial of service and arbitrary code execution. • Affected systems include Ubuntu 24.04 LTS, with significant resource usage concerns. • Users should update to the latest NASM versions to mitigate these vulnerabilities.

Key Entities

• Denial of Service (attack_type)
• Zero-day Exploit (attack_type)
• CVE-2021-33450 (cve)
• CVE-2021-33452 (cve)
• CVE-2023-31722 (cve)
• Cwe-122 - Heap-based Buffer Overflow (cwe)
• NASM (tool)
• Ubuntu (company)
• Ubuntu 24.04 LTS (platform)