Yasm NULL Pointer Dereference Vulnerability in yasm_section_bcs_append Function

A NULL pointer dereference vulnerability has been identified in Yasm commit 9defefae. The issue arises in the yasm_section_bcs_append function within section.c, where a NULL pointer is improperly handled, leading to a segmentation fault.

Impact

Exploitation of this vulnerability causes a segmentation fault, terminating the process due to an invalid memory access.

Reproduction

The vulnerability can be reproduced by building Yasm with AddressSanitizer enabled, and then running Yasm with a proof-of-concept file that triggers the NULL pointer dereference. The proof-of-concept file can be found in the 'TimChan2001/pocs' repository on GitHub.

Remediation

Users can update to the latest version of Yasm, where this vulnerability has been fixed.