CVE-2024-22653 — NULL Pointer Dereference in Project Yasm

CWE-476 — NULL Pointer Dereference6 documents6 sources
Severity
4.8MEDIUMNVD
EPSS
0.2%
top 60.13%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Yasm Project YasmDebian YasmMsrc Azl3 Yasm 1.3.0-17 ON Azure Linux 3.0+1 more
Timeline
PublishedMay 29

Description

yasm commit 9defefae was discovered to contain a NULL pointer dereference via the yasm_section_bcs_append function at section.c.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:NExploitability: 2.2 | Impact: 2.5

Affected Packages4 packages

▶debiandebian/yasm
▶NVDyasm_project/yasm2023-09-22

🔴Vulnerability Details

2
GHSA
GHSA-qgwh-9j3v-m669: yasm commit 9defefae was discovered to contain a NULL pointer dereference via the yasm_section_bcs_append function at section↗2025-05-29
▶
OSV
CVE-2024-22653: yasm commit 9defefae was discovered to contain a NULL pointer dereference via the yasm_section_bcs_append function at section↗2025-05-29
▶

📋Vendor Advisories

3
Red Hat
yasm: Null pointer dereference in yasm↗2025-05-29
▶
Microsoft
yasm commit 9defefae was discovered to contain a NULL pointer dereference via the yasm_section_bcs_append function at section.c.↗2025-05-13
▶
Debian
CVE-2024-22653: yasm - yasm commit 9defefae was discovered to contain a NULL pointer dereference via th...↗2024
▶
CVE-2024-22653 — NULL Pointer Dereference | cvebase