CVE-2017-10686

In Netwide Assembler (NASM) 2.14rc0, there are multiple heap use after free vulnerabilities in the tool nasm. The related heap is allocated in the token() function and freed in the detoken() function (called by pp_getline()) - it is used again at multiple positions later that could cause multiple damages. For example, it causes a corrupted double-linked list in detoken(), a double free or corruption in delete_Token(), and an out-of-bounds write in detoken(). It has a high possibility to lead to a remote code execution attack.

• CWE-416

• https://bugzilla.nasm.us/show_bug.cgi?id=3392414Exploit, Issue Tracking, Patch, Third Party Advisory, VDB Entry
• https://security.gentoo.org/glsa/201903-19
• https://usn.ubuntu.com/3694-1/Third Party Advisory
• https://bugzilla.nasm.us/show_bug.cgi?id=3392414Exploit, Issue Tracking, Patch, Third Party Advisory, VDB Entry
• https://security.gentoo.org/glsa/201903-19
• https://usn.ubuntu.com/3694-1/Third Party Advisory

Published

Jun 29, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-10680Cross-site request forgery (CSRF) vulnerability in Piwigo th…
• CVE-2017-10681Cross-site request forgery (CSRF) vulnerability in Piwigo th…
• CVE-2017-10682SQL injection vulnerability in the administrative backend in…
• CVE-2017-10683In mpg123 1.25.0, there is a heap-based buffer over-read in …7.5
• CVE-2017-10684In ncurses 6.0, there is a stack-based buffer overflow in th…9.8
• CVE-2017-10685In ncurses 6.0, there is a format string vulnerability in th…9.8
• CVE-2017-10687In LibSass 3.4.5, there is a heap-based buffer over-read in …
• CVE-2017-10688In LibTIFF 4.0.8, there is a assertion abort in the TIFFWrit…
• CVE-2017-10689In previous versions of Puppet Agent it was possible to inst…
• CVE-2017-1069Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-10690In previous versions of Puppet Agent it was possible for the…
• CVE-2017-10699avcodec 2.2.x, as used in VideoLAN VLC media player 2.2.7-x …