Yasm · Yasm · CVE-2023-29583
**Name of the Vulnerable Software and Affected Versions**
yasm version 1.3.0.55.g101bc
**Description**
A stack overflow issue was discovered in the `parse expr5` function at `/nasm/nasm-parse.c`. This issue has been disputed by third parties, arguing it is a bug rather than a security issue, as yasm is a standalone program not designed to run untrusted code.
**Recommendations**
For yasm version 1.3.0.55.g101bc, as a temporary workaround, consider restricting the use of the `parse expr5` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.