medium5.5
CVE-2023-31973
yasm v1.3.0 was discovered to contain a use after free via the function expand_mmac_params at /nasm/nasm-pp.c.
Impact
yasm v1.3.0 was discovered to contain a use after free via the function expand_mmac_params at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tortall | Yasm | Version 1.3.0 |