CVE-2026-6069: Buffer Overflow
Published Apr 10, 2026
·Updated
NASM’s disasm() function contains a stack based buffer overflow when formatting disassembly output, allowing an attacker triggered out-of-bounds write when slen exceeds the buffer capacity.
Affected Software
2 affected components
nasm NASM
nasm Netwide Assembler=3.02-rc5
Event History
Apr 10, 2026
CVE Published
via MITRE·01:30 PM
Data Sourced
via MITRE·01:30 PM
DescriptionWeakness
Data Sourced
via NVD·02:16 PM
DescriptionSeverityWeaknessAffected Software
Nov 28, 58273
Event
via FIRST·08:56 AM
Frequently Asked Questions
1
What is the severity of CVE-2026-6069?
CVE-2026-6069 is classified as a critical vulnerability due to its potential for exploitation through a stack-based buffer overflow.
2
How do I fix CVE-2026-6069?
To fix CVE-2026-6069, update to the latest version of NASM that addresses the buffer overflow issue.
3
What are the potential impacts of CVE-2026-6069?
The impacts of CVE-2026-6069 include the possibility for an attacker to execute arbitrary code or trigger a denial of service through stack corruption.
4
Which versions of NASM are affected by CVE-2026-6069?
CVE-2026-6069 affects NASM version 3.02-rc5 and possibly previous versions.
5
Is CVE-2026-6069 a remote vulnerability?
CVE-2026-6069 requires local access to exploit, making it a local vulnerability rather than remote.