PatchTheCVEyasm vulnerabilities and fixes
Recent CVEs affecting yasm, with upgrade or downgrade steps. 1 tracked.
yasm has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-05-29. Highest priority: CVE-2024-22653 (score 32/100).
- CVE-2024-22653 MEDIUM 4.8 DOWNGRADE yasm commit 9defefae was discovered to contain a NULL pointer dereference via the yasm_section_bcs_append func
FAQ
How do I fix yasm vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is yasm being exploited right now?
None of the tracked yasm CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which yasm CVE should I patch first?
CVE-2024-22653 currently ranks highest (32/100): yasm commit 9defefae was discovered to contain a NULL pointer dereference via the yasm_section_bcs_append func.