Netwide Assembler · Nasm · CVE-2022-29654
**Name of the Vulnerable Software and Affected Versions**
nasm versions prior to 2.15.05
**Description**
The issue is related to a buffer overflow vulnerability in the `quote for pmake` function in `asm/nasm.c` of the Netwide Assembler (NASM). This vulnerability can be exploited by attackers to cause a denial of service via crafted files. The vulnerability is associated with the lack of size checking for input data, allowing for uncontrolled copying into a buffer.
**Recommendations**
For versions prior to 2.15.05, update to version 2.15.05 or later to resolve the issue. As a temporary workaround, consider restricting the use of the `quote for pmake` function in `asm/nasm.c` to minimize the risk of exploitation.