Back to vendor advisories
Microsoft Security Response CenterCVE-2023-29583

yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the function parse_expr5 at /nasm/nasm-parse.c. Note: This has been disputed by third parties who argue this is a bug and not a security issue because yasm is a standalone program not designed to run untrusted code.

MediumVendor CVSS 6.2 / 10 1 CVE Published Aug 7, 2026 at 12:35 AM UTC

Summary

Mariner

Products covered

  • azl3 yasm 1.3.0-16 on Azure Linux 3.0

Remediation

Separate remediation guidance was not included in the collected bulletin.

CVEs in this advisory 1

Updates

  1. Published by Microsoft Security Response Center

    The publication date reported by the vendor.

  2. Added to SecurityAlert

    We collected the advisory from the official source.