{"id":"CVE-2018-1000886","details":"nasm version 2.14.01rc5, 2.15 contains a Buffer Overflow vulnerability in asm/stdscan.c:130 that can result in Stack-overflow caused by triggering endless macro generation, crash the program. This attack appear to be exploitable via a crafted nasm input file.","modified":"2026-09-08T14:02:33.793205Z","published":"2018-12-20T21:29:00.447Z","references":[{"type":"REPORT","url":"https://bugzilla.nasm.us/show_bug.cgi?id=3392514"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/netwide-assembler/nasm","events":[{"introduced":"bc7f5fd93c55ef9fdb5e6c0ef7403a383bee841e"},{"last_affected":"a825b33423d5046dfc4c0992c3ebfea5b8a531c4"}],"database_specific":{"extracted_events":[{"introduced":"2.14.01rc5"},{"last_affected":"2.14.01rc5"},{"introduced":"2.15"},{"last_affected":"2.15"}],"source":"CPE_STRING","cpe":["cpe:2.3:a:nasm:netwide_assembler:2.14.01rc5:*:*:*:*:*:*:*","cpe:2.3:a:nasm:netwide_assembler:2.15:*:*:*:*:*:*:*"]}}],"versions":["2.14.01rc5","2.15"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-1000886.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}]}