CVE-2026-6069

CVE-2026-6069 is a stack-based buffer overflow vulnerability in NASM's disasm() function that occurs when the slen parameter exceeds buffer capacity during disassembly output formatting, enabling out-of-bounds memory writes. The vulnerability affects systems utilizing the Netwide Assembler (NASM) for assembly language processing and disassembly operations. The vulnerability carries a HIGH severity rating with a CVSS score of 7.5, characterized by a network-based attack vector requiring no authentication or user interaction. While the attack has low complexity, the impact is limited to availability, with no confidentiality or integrity effects. This indicates the primary risk is denial-of-service through application crash or instability. There is currently no evidence of active exploitation in the wild, as the vulnerability is not listed on the Known Exploited Vulnerabilities (KEV) catalog and remains inactive on threat intelligence hot lists. The low EPSS score of 0.00015 suggests minimal practical exploitation likelihood compared to other disclosed vulnerabilities, though organizations using NASM for development or malware analysis should implement patches when available.