Webassembly: >> Binaryen Security Vulnerabilities
A NULL pointer dereference was discovered in SExpressionWasmBuilder::makeBlock in wasm/wasm-s-parser.c in Binaryen 1.38.26. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm-as.
CVSS Score
6.5
EPSS Score
0.002
Published
2023-08-22
Heap-buffer-overflow in /src/wasm/wasm-binary.cpp in wasm::WasmBinaryBuilder::visitBlock(wasm::Block*) in Binaryen 1.38.26. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm-opt.
CVSS Score
6.5
EPSS Score
0.002
Published
2023-08-22
A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::WasmBinaryBuilder::visitRethrow(wasm::Rethrow*).
CVSS Score
5.5
EPSS Score
0.002
Published
2022-01-10
A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::WasmBinaryBuilder::visitRethrow(wasm::Rethrow*).
CVSS Score
5.5
EPSS Score
0.002
Published
2022-01-10
A Denial of Service vulnerability exists in Binaryen 103. The program terminates with signal SIGKILL.
CVSS Score
5.5
EPSS Score
0.002
Published
2022-01-10
A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::Tuple::validate.
CVSS Score
5.5
EPSS Score
0.002
Published
2022-01-10
A Stack Overflow vulnerability exists in Binaryen 103 via the printf_common function.
CVSS Score
5.5
EPSS Score
0.002
Published
2022-01-10
A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::WasmBinaryBuilder::readFunctions.
CVSS Score
5.5
EPSS Score
0.002
Published
2022-01-10
A Denial of Service vulnerability exits in Binaryen 103 due to an assertion abort in wasm::handle_unreachable.
CVSS Score
7.5
EPSS Score
0.004
Published
2021-12-21
A Denial of Service vulnerability exists in Binaryen 103 due to an Invalid memory address dereference in wasm::WasmBinaryBuilder::visitLet.
CVSS Score
5.5
EPSS Score
0.002
Published
2021-12-21
Page 1