CVE-2018-1000886

nasm version 2.14.01rc5, 2.15 contains a Buffer Overflow vulnerability in asm/stdscan.c:130 that can result in Stack-overflow caused by triggering endless macro generation, crash the program. This attack appear to be exploitable via a crafted nasm input file.

• CWE-119

• https://bugzilla.nasm.us/show_bug.cgi?id=3392514Exploit, Issue Tracking, Third Party Advisory
• https://bugzilla.nasm.us/show_bug.cgi?id=3392514Exploit, Issue Tracking, Third Party Advisory

Published

Dec 20, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-1000880libarchive version commit 9693801580c0cf7c70e862d305270a16b5…6.5
• CVE-2018-1000881Traccar Traccar Server version 4.0 and earlier contains a CW…
• CVE-2018-1000882WeBid version up to current version 1.2.2 contains a Directo…
• CVE-2018-1000883Elixir Plug Plug version All contains a Header Injection vul…
• CVE-2018-1000884Vesta CP version Prior to commit f6f6f9cfbbf2979e301956d1c6a…
• CVE-2018-1000885PHKP version including commit 88fd9cfdf14ea4b6ac3e3967feea7b…
• CVE-2018-1000887Peel shopping peel-shopping_9_1_0 version contains a Cross S…
• CVE-2018-1000888PEAR Archive_Tar version 1.4.3 and earlier contains a CWE-50…
• CVE-2018-1000889Logisim Evolution version 2.14.3 and earlier contains an XML…
• CVE-2018-1000890FrontAccounting 2.4.5 contains a Time Based Blind SQL Inject…
• CVE-2018-1000891Bitcoin SV before 0.1.1 allows uncontrolled resource consump…7.5
• CVE-2018-1000892Bitcoin SV before 0.1.1 allows uncontrolled resource consump…7.5