CVE-2026-6067

DOCUMENTATION: A flaw was found in Netwide Assembler (NASM). This heap buffer overflow vulnerability, stemming from insufficient bounds checking, allows a user to execute arbitrary code by assembling a specially crafted malicious assembly (.asm) file. Successful exploitation can lead to unauthorized command execution, heap memory corruption, and denial of service, potentially causing system instability or crashes. 

            STATEMENT: An IMPORTANT heap buffer overflow in Netwide Assembler (NASM) can lead to arbitrary code execution. This flaw requires a local attacker to provide a specially crafted assembly file for processing. Red Hat Enterprise Linux systems are affected if NASM is used to assemble untrusted .asm files.