CVE-2023-31975

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2023-31975

Severity

3.3

Low

CVSS V3

Description

yasm v1.3.0 was discovered to contain a memory leak via the function yasm_intnum_copy at /libyasm/intnum.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy.

References

https://images.chainguard.dev/security/CGA-r7vf-966w-fgrr
https://github.com/advisories/GHSA-g56w-fm5h-cwrp
http://www.openwall.com/lists/oss-security/2023/06/20/6
http://www.openwall.com/lists/oss-security/2023/06/21/10
http://www.openwall.com/lists/oss-security/2023/06/21/13
http://www.openwall.com/lists/oss-security/2023/06/21/2
http://www.openwall.com/lists/oss-security/2023/06/21/5
http://www.openwall.com/lists/oss-security/2023/06/21/7
http://www.openwall.com/lists/oss-security/2023/06/21/8
http://www.openwall.com/lists/oss-security/2023/06/21/9
http://www.openwall.com/lists/oss-security/2023/06/22/1
http://www.openwall.com/lists/oss-security/2023/06/22/3
http://www.openwall.com/lists/oss-security/2023/06/22/6
http://www.openwall.com/lists/oss-security/2023/06/23/1
http://www.openwall.com/lists/oss-security/2023/06/23/2
http://www.openwall.com/lists/oss-security/2023/06/23/4
http://www.openwall.com/lists/oss-security/2023/06/23/8
http://www.openwall.com/lists/oss-security/2023/06/23/9
http://www.openwall.com/lists/oss-security/2023/06/24/1
https://github.com/yasm/yasm/issues/210

Affected packages

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

The trusted source for open source

Talk to an expert

Privacy

Terms

CVE-2023-31975

Severity

Description

References

Affected packages

The trusted source for open source

Product

Solutions

Customers

Resources

Company