CVE-2019-6290

5.5 mediumEPSS 1.2%

Medium (5.5) in nasm netwide assembler. EPSS 1.2% chance of exploitation in the next 30 days.

An infinite recursion issue was discovered in eval.c in Netwide Assembler (NASM) through 2.14.02. There is a stack exhaustion problem resulting from infinite recursion in the functions expr, rexp, bexpr and cexpr in certain scenarios involving lots of '{' characters. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted asm file.

Severity

CVSS 3.0

5.5 medium

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 67% of CVEs (scores of 2026-10-31)
CWE: CWE-674
Published: 2019-01-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

nasm:netwide_assembler

References

https://bugzilla.nasm.us/show_bug.cgi?id=3392548
https://bugzilla.nasm.us/show_bug.cgi?id=3392548

Check your stack JSON