CVE catalog

CVE-2026-6067

A heap buffer overflow vulnerability exists in the…

A heap buffer overflow vulnerability exists in the Netwide Assembler (NASM) due to a lack of bounds checking in the obj_directive() function. This vulnerability can be exploited by a user assembling a malicious .asm file, potentially leading to heap memory corruption, denial of service (crash), and arbitrary code execution.

Severity: High · CVSS 7.3CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Published: Apr 10, 2026, 1:30:26 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.36% · Oct 29, 2026

Projects and upstream resources

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / release	Package	Version	Status	Source
Opensusetumbleweed	nasm	`3.02-1.1`	UnknownSource applicability is not established	[OPENSUSE-SU-2026:11217-1]Jul 9, 2026, 10:00:13 AM UTC
Debiantrixie	nasm	Not reported	AffectedDistribution reports no fix	[CVE-2026-6067]
Debiantrixie	nasm	`2.16.03-1`	Affected	[CVE-2026-6067]
Debiansid	nasm	Not reported	AffectedDistribution reports no fix	[CVE-2026-6067]
Debiansid	nasm	`3.01-1`	Affected	[CVE-2026-6067]
Suselinux enterprise module for development tools 15 sp7	nasm	`2.16.03-150700.3.3.1`	UnknownSource applicability is not established	[SUSE-SU-2026:3178-1]Jul 23, 2026, 9:45:05 AM UTC
Opensuseleap 16.0	nasm	`3.02-160000.1.1`	UnknownSource applicability is not established	[OPENSUSE-SU-2026:21333-1]Jul 15, 2026, 10:00:12 AM UTC
Debianforky	nasm	Not reported	AffectedDistribution reports no fix	[CVE-2026-6067]
Debianforky	nasm	`3.01-1`	Affected	[CVE-2026-6067]
Debianbookworm	nasm	Not reported	AffectedDistribution reports no fix	[CVE-2026-6067]
Debianbookworm	nasm	`2.16.01-1`	Affected	[CVE-2026-6067]
UnknownRelease not reported	nasm	Not reported	UnknownSource applicability is not established	Provider not reported

Showing 12 observations. All 13 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence

Distribution / release	Package	Version	Status	Source
UnknownRelease not reported	nasm	Not reported	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	netwide_assembler	Not reported	UnknownSource applicability is not established	Provider not reported
Debianbookworm	nasm	Not reported	AffectedDistribution reports no fix	[CVE-2026-6067]
Debianbookworm	nasm	`2.16.01-1`	Affected	[CVE-2026-6067]
Debianforky	nasm	Not reported	AffectedDistribution reports no fix	[CVE-2026-6067]
Debianforky	nasm	`3.01-1`	Affected	[CVE-2026-6067]
Debiansid	nasm	Not reported	AffectedDistribution reports no fix	[CVE-2026-6067]
Debiansid	nasm	`3.01-1`	Affected	[CVE-2026-6067]
Debiantrixie	nasm	Not reported	AffectedDistribution reports no fix	[CVE-2026-6067]
Debiantrixie	nasm	`2.16.03-1`	Affected	[CVE-2026-6067]
Opensuseleap 16.0	nasm	`3.02-160000.1.1`	UnknownSource applicability is not established	[OPENSUSE-SU-2026:21333-1]Jul 15, 2026, 10:00:12 AM UTC
Opensusetumbleweed	nasm	`3.02-1.1`	UnknownSource applicability is not established	[OPENSUSE-SU-2026:11217-1]Jul 9, 2026, 10:00:13 AM UTC
Suselinux enterprise module for development tools 15 sp7	nasm	`2.16.03-150700.3.3.1`	UnknownSource applicability is not established	[SUSE-SU-2026:3178-1]Jul 23, 2026, 9:45:05 AM UTC

Original provider fields

{
  "package_releases": [
    {
      "name": "nasm",
      "status": "vulnerable",
      "release": "sid",
      "version": "3.01-1"
    },
    {
      "name": "nasm",
      "status": "vulnerable",
      "release": "forky",
      "version": "3.01-1"
    },
    {
      "name": "nasm",
      "status": "vulnerable",
      "release": "trixie",
      "version": "2.16.03-1"
    },
    {
      "name": "nasm",
      "status": "vulnerable",
      "release": "bookworm",
      "version": "2.16.01-1"
    }
  ],
  "fixed_versions": [
    {
      "bug": 1133375,
      "name": "nasm",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": ""
    },
    {
      "bug": 1133375,
      "name": "nasm",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": ""
    },
    {
      "bug": 1133375,
      "name": "nasm",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": ""
    },
    {
      "bug": 1133375,
      "name": "nasm",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": ""
    }
  ],
  "distribution_packages": [
    {
      "name": "nasm",
      "fixed_version": "not yet fixed",
      "applicability_unknown": true
    },
    {
      "name": "netwide_assembler",
      "fixed_version": "",
      "applicability_unknown": true
    },
    {
      "name": "nasm",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.16.03-150700.3.3.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for development tools 15 sp7",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:3178-1",
      "fixed_version": "2.16.03-150700.3.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2026:3178-1",
      "provider_updated_at": "2026-07-23T09:45:05.476686804Z",
      "applicability_unknown": true
    },
    {
      "name": "nasm",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.02-160000.1.1"
            }
          ]
        }
      ],
      "release": "leap 16.0",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2026:21333-1",
      "fixed_version": "3.02-160000.1.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2026:21333-1",
      "provider_updated_at": "2026-07-15T10:00:12.755575872Z",
      "applicability_unknown": true
    },
    {
      "name": "nasm",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.02-1.1"
            }
          ]
        }
      ],
      "release": "tumbleweed",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2026:11217-1",
      "fixed_version": "3.02-1.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2026:11217-1",
      "provider_updated_at": "2026-07-09T10:00:13.393421738Z",
      "applicability_unknown": true
    }
  ]
}

[Debian bug #1133375]

Publisher notes

[trixie] nasm: Minor issue, revisit when fixed upstream [bookworm] nasm: Minor issue, revisit when fixed upstream

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[nasm]Unknown
Details (2)
- 2.16.01-1 · amd64 · bookworm
  Unknown
  Version impact unknown
  nvd · nasm · debian · bookworm; pypi · nasm · debian · 12; pypi · nasm · debian · 13; pypi · nasm · debian · 14
- 2.16.01-1 · arm64 · bookworm
  Unknown
  Version impact unknown
  nvd · nasm · debian · bookworm; pypi · nasm · debian · 12; pypi · nasm · debian · 13; pypi · nasm · debian · 14

[Debian 13 (Trixie)]

[nasm]Unknown
Details (2)
- 2.16.03-1 · amd64 · trixie
  Unknown
  Version impact unknown
  nvd · nasm · debian · bookworm; pypi · nasm · debian · 12; pypi · nasm · debian · 13; pypi · nasm · debian · 14
- 2.16.03-1 · arm64 · trixie
  Unknown
  Version impact unknown
  nvd · nasm · debian · bookworm; pypi · nasm · debian · 12; pypi · nasm · debian · 13; pypi · nasm · debian · 14

[openSUSE Leap 15.6]

[nasm]Unknown
Source package: [nasm]
Details (4)
- 2.15.05-150500.1.2 · aarch64 · leap-15.6
  Unknown · Fixed: 3.02-1.1, 3.02-160000.1.1
  Version impact unknown
  pypi · nasm · opensuse · leap 16.0; pypi · nasm · opensuse · tumbleweed
- 2.15.05-150500.1.2 · ppc64le · leap-15.6
  Unknown · Fixed: 3.02-1.1, 3.02-160000.1.1
  Version impact unknown
  pypi · nasm · opensuse · leap 16.0; pypi · nasm · opensuse · tumbleweed
- 2.15.05-150500.1.2 · s390x · leap-15.6
  Unknown · Fixed: 3.02-1.1, 3.02-160000.1.1
  Version impact unknown
  pypi · nasm · opensuse · leap 16.0; pypi · nasm · opensuse · tumbleweed
- 2.15.05-150500.1.2 · x86_64 · leap-15.6
  Unknown · Fixed: 3.02-1.1, 3.02-160000.1.1
  Version impact unknown
  pypi · nasm · opensuse · leap 16.0; pypi · nasm · opensuse · tumbleweed

[openSUSE Leap 16.0]

[nasm]Unknown
Source package: [nasm]
Details (8)
- 2.16.03-160000.3.2 · aarch64 · leap-16.0
  Unknown · Fixed: 3.02-1.1, 3.02-160000.1.1
  Version impact unknown
  pypi · nasm · opensuse · leap 16.0; pypi · nasm · opensuse · tumbleweed
- 2.16.03-160000.3.2 · ppc64le · leap-16.0
  Unknown · Fixed: 3.02-1.1, 3.02-160000.1.1
  Version impact unknown
  pypi · nasm · opensuse · leap 16.0; pypi · nasm · opensuse · tumbleweed
- 2.16.03-160000.3.2 · s390x · leap-16.0
  Unknown · Fixed: 3.02-1.1, 3.02-160000.1.1
  Version impact unknown
  pypi · nasm · opensuse · leap 16.0; pypi · nasm · opensuse · tumbleweed
- 2.16.03-160000.3.2 · x86_64 · leap-16.0
  Unknown · Fixed: 3.02-1.1, 3.02-160000.1.1
  Version impact unknown
  pypi · nasm · opensuse · leap 16.0; pypi · nasm · opensuse · tumbleweed
- 3.02-160000.1.1 · aarch64 · leap-16.0
  Unknown · Fixed: 3.02-1.1, 3.02-160000.1.1
  Version impact unknown
  pypi · nasm · opensuse · leap 16.0; pypi · nasm · opensuse · tumbleweed
- 3.02-160000.1.1 · ppc64le · leap-16.0
  Unknown · Fixed: 3.02-1.1, 3.02-160000.1.1
  Version impact unknown
  pypi · nasm · opensuse · leap 16.0; pypi · nasm · opensuse · tumbleweed
- 3.02-160000.1.1 · s390x · leap-16.0
  Unknown · Fixed: 3.02-1.1, 3.02-160000.1.1
  Version impact unknown
  pypi · nasm · opensuse · leap 16.0; pypi · nasm · opensuse · tumbleweed
- 3.02-160000.1.1 · x86_64 · leap-16.0
  Unknown · Fixed: 3.02-1.1, 3.02-160000.1.1
  Version impact unknown
  pypi · nasm · opensuse · leap 16.0; pypi · nasm · opensuse · tumbleweed

[openSUSE Tumbleweed]

[nasm]Unknown
Source package: [nasm]
Details (1)
- 3.02-1.2 · x86_64 · tumbleweed
  Unknown · Fixed: 3.02-1.1, 3.02-160000.1.1
  Version impact unknown
  pypi · nasm · opensuse · leap 16.0; pypi · nasm · opensuse · tumbleweed

Observed: Oct 29, 2026, 10:55:04 AM UTC

References

[Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]