PT-2022-10248 · Nasm+1 · Nasm+1

Published 2022-07-26 · Updated 2026-05-08 · CVE-2021-33452

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions NASM version 2.16rc0

Description An issue was discovered in the NASM software, specifically memory leaks in the nasm malloc() function located in nasmlib/alloc.c.

Recommendations For NASM version 2.16rc0, consider restricting the use of the nasm malloc() function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

AZL-41956

CVE-2021-33452

USN-8248-1

USN-8248-2

Affected Products

Debian

Nasm

References · 18

• 🔥 https://bugzilla.nasm.us/show_bug.cgi?id=3392757 · Exploit
• https://ubuntu.com/security/CVE-2021-33452 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-33452 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-33452 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-33452 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-33452 · Security Note
• https://ubuntu.com/security/notices/USN-8248-2 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-33452 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8248-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8248-2 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-33452 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-31722 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-33450 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-41956 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8248-1 · Vendor Advisory