CVE-2026-6068 — NASM Heap UAF Turns Into Persistent RCE Through a Dependency-File Symlink Trick

Attribution. This is an original English rewrite based on the writeup “CVE-2026-6068 – From Heap UAF to Persistent RCE in NASM” by breakingbad on Project SEKAI (sekai.team, published 18 May 2026). All research, code, screenshots and the disclosure timeline are the original author’s work. Both screenshots and every code listing are reproduced verbatim at their…

https://core-jmp.org/2026/05/cve-2026-6068-nasm-heap-uaf-persistent-rce/