CVE-2019-20334: Medium severity netwide assembler (nasm) vulnerability

Published Jan 4, 2020

Updated

In Netwide Assembler (NASM) 2.14.02, stack consumption occurs in expr# functions in asm/eval.c. This potentially affects the relationships among expr0, expr1, expr2, expr3, expr4, expr5, and expr6 (and stdscan in asm/stdscan.c). This is similar to CVE-2019-6290 and CVE-2019-6291.

Affected Software

1 affected component

nasm Netwide Assembler=2.14.02

Event History

Jan 4, 2020

CVE Published

via MITRE·06:43 AM

Data Sourced

via MITRE·06:43 AM

Description

Sep 3, 2025

Data Sourced

via Microsoft·10:02 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2019-20334?

CVE-2019-20334 is a vulnerability in Netwide Assembler (NASM) version 2.14.02 that causes stack consumption in expr# functions in asm/eval.c.

How does CVE-2019-20334 affect the expr# functions in NASM?

CVE-2019-20334 affects the relationships among expr0, expr1, expr2, expr3, expr4, expr5, and expr6, as well as stdscan in asm/stdscan.c.

What is the severity of CVE-2019-20334?

CVE-2019-20334 has a severity rating of medium with a CVSS score of 5.5.

Which version of NASM is affected by CVE-2019-20334?

CVE-2019-20334 affects NASM version 2.14.02.

Is there a fix available for CVE-2019-20334?

Yes, a fix for CVE-2019-20334 is available. Please refer to the provided references for more information.