CVE catalog
CVE-2023-29581
yasm: CVE-2023-29581
- Severity
- Low
- Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.34% · Oct 25, 2026
yasm 1.3.0.55.g101bc has a segmentation violation in the function delete_Token at modules/preprocs/nasm/nasm-pp.c. NOTE: although a libyasm application could become unavailable if this were exploited, the vendor's position is that there is no security relevance because there is either supposed to be input validation before data reaches libyasm, or a sandbox in which the application runs.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | yasm | sid | 1.3.0-8 | vulnerable |
| Debian | yasm | forky | 1.3.0-8 | vulnerable |
| Debian | yasm | trixie | 1.3.0-7 | vulnerable |
| Debian | yasm | bookworm | 1.3.0-4 | vulnerable |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | yasm | source | sid | (unfixed) | unimportant | Not reported | Not reported |
| Debian | yasm | source | forky | (unfixed) | unimportant | Not reported | Not reported |
| Debian | yasm | source | trixie | (unfixed) | unimportant | Not reported | Not reported |
| Debian | yasm | source | bookworm | (unfixed) | unimportant | Not reported | Not reported |
OpenFactory catalog packages
Matching against OpenFactory catalog package versions is in progress.