CVE-2020-21686

Summary

CVE-2020-21686 is a stack-use-after-scope vulnerability affecting nasm before 2.15.04. This issue is located in the expand_mmac_params function of preproc.c. An attacker can exploit this flaw by providing a specially crafted assembly file, resulting in a denial of service. The stack is used beyond its intended scope, leading to unintended memory access and potential crashes. This vulnerability poses a risk for remote denial of service attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.