CVE-2019-19787

ATasm 1.06 has a stack-based buffer overflow in the get_signed_expression() function in setparse.c via a crafted .m65 file.

Score

CVSS 3.1 7.8 High

Status

Modified - cve@mitre.org

Published

2019-12-13

Last modified

2024-08-05

Weaknesses

CWE-787

Affected products

• Atasm (Atasm Project)
• Fedora (Fedoraproject)

References

• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KUABDG4CEAY2FVPM3CFFCZ…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O6XQMOLMWHUDBN3PQJYGVU…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZJYUV3PKSIGBZGJ6PXAGT…
• https://sourceforge.net/p/atasm/bugs/10/