CVE-2024-22653 Null dereference in n/a
A NULL pointer dereference in the Yasm assembler library allows attackers to cause a denial of service via crafted input.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-22653?
CVE-2024-22653 is a medium-severity vulnerability in n/a, published on 29 May 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
yasm commit 9defefae was discovered to contain a NULL pointer dereference via the yasm_section_bcs_append function at section.c.
Weakness: CWE-476
Which versions are affected by CVE-2024-22653?
It affects 1 product.
Products include Yasm Project Yasm.
How do I fix CVE-2024-22653?
Apply the vendor's patch.
Is CVE-2024-22653 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-22653 exists.
Other vulnerabilities in n/a
Sources
Also known as AZL-64242, AZL-64274, BELL-CVE-2024-22653, DEBIAN-CVE-2024-22653, GHSA-qgwh-9j3v-m669, OESA-2025-1639 and 1 more.