CVE-2026-6067

A flaw was found in Netwide Assembler (NASM). This heap buffer overflow vulnerability, stemming from insufficient bounds checking, allows a user to execute arbitrary code by assembling a specially crafted malicious assembly (.asm) file. Successful exploitation can lead to unauthorized command execution, heap memory corruption, and denial of service, potentially causing system instability or crashes.

An IMPORTANT heap buffer overflow in Netwide Assembler (NASM) can lead to arbitrary code execution. This flaw requires a local attacker to provide a specially crafted assembly file for processing. Red Hat Enterprise Linux systems are affected if NASM is used to assemble untrusted .asm files.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.