CVE-2026-6068

Katalog CVE

CVSS 9.6 · Critical EPSS 0,48%

Kerentanan Use After Free pada nasm netwide assembler. Skor CVSS 3.1 9.6 (Critical) menurut NVD.

Deskripsi (NVD)

NASM contains a heap use after free vulnerability in response file (-@) processing where a dangling pointer to freed memory is stored in the global depend_file and later dereferenced, as the response-file buffer is freed before the pointer is used, allowing for data corruption or remote code execution.

Rincian

Terbit di NVD

10 April 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

9.6 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-416: Use After Free

EPSS (30 hari)

0,48% peluang dieksploitasi; lebih tinggi dari 39,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://sekai.team/blog/nasm-cve-disclosure/cve-2026-6068 exploit · advisory pihak ketiga
• https://github.com/netwide-assembler/nasm/issues/222 exploit · issue tracking