CVE-2023-29580

FAUCET Score

CVE-2023-29580 is a medium-severity vulnerability affecting yasm_project yasm version 1.3.0.55.g101bc, where a segmentation violation can occur in the yasm_expr_create component. This local vulnerability requires user interaction and could lead to a denial of service, but does not impact confidentiality or integrity. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		1.3.0.55.g101bcCPE matchmatch criteria	cpe:2.3:a:yasm_project:yasm:1.3.0.55.g101bc:::::::*

CVSS Data

CVSS version used by this source: 3.1

5.5MEDIUM

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

Exploitability Score

1.8

Impact Score

3.6

CvssVersion

3.1

Exploit Intelligence

EPSS Score

0.31%

Probability of exploitation in next 30 days

EPSS Percentile

23.5%

Percentile rank of EPSS score among Peer Group

As of 2026-07-27

Model: v2026.06.15

This CVE's current EPSS score of 0.0031 is in the 29th percentile among its peer group of 5,760 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Advisories (1)

microsoft2023-Apr/CVE-2023-29580Moderate

yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the component yasm_expr_create at /libyasm/expr.c.

Apr 11, 2023

References

github.com / yasm/yasm/issues/215

ExploitIssue TrackingThird Party Advisory

github.com / z1r00/fuzz_vuln/blob/main/yasm/segv/yasm_expr_create/readmd.md

ExploitThird Party Advisory