Webassembly: Security Vulnerabilities
A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::Tuple::validate.
CVSS Score
5.5
EPSS Score
0.002
Published
2022-01-10
A Stack Overflow vulnerability exists in Binaryen 103 via the printf_common function.
CVSS Score
5.5
EPSS Score
0.002
Published
2022-01-10
A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::WasmBinaryBuilder::readFunctions.
CVSS Score
5.5
EPSS Score
0.002
Published
2022-01-10
A Denial of Service vulnerability exits in Binaryen 103 due to an assertion abort in wasm::handle_unreachable.
CVSS Score
7.5
EPSS Score
0.004
Published
2021-12-21
A Denial of Service vulnerability exists in Binaryen 103 due to an Invalid memory address dereference in wasm::WasmBinaryBuilder::visitLet.
CVSS Score
5.5
EPSS Score
0.002
Published
2021-12-21
An issue was discovered in Binaryen 1.38.32. Missing validation rules in asmjs/asmangle.cpp can lead to an Assertion Failure at wasm/wasm.cpp in wasm::asmangle. A crafted input can cause denial-of-service, as demonstrated by wasm2js.
CVSS Score
6.5
EPSS Score
0.003
Published
2019-08-29
An issue was discovered in Binaryen 1.38.32. Two visitors in ir/ExpressionManipulator.cpp can lead to a NULL pointer dereference in wasm::LocalSet::finalize in wasm/wasm.cpp. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by wasm2js.
CVSS Score
6.5
EPSS Score
0.003
Published
2019-08-29
A heap-based buffer over-read was discovered in wasm::WasmBinaryBuilder::visitCall in wasm-binary.cpp in Binaryen 1.38.22. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm-merge.
CVSS Score
6.5
EPSS Score
0.003
Published
2019-02-10
A heap-based buffer over-read was discovered in wasm::SExpressionParser::skipWhitespace() in wasm-s-parser.cpp in Binaryen 1.38.22. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm2js.
CVSS Score
6.5
EPSS Score
0.003
Published
2019-02-10
A NULL pointer dereference was discovered in wasm::SExpressionWasmBuilder::parseExpression in wasm-s-parser.cpp in Binaryen 1.38.22. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm-as.
CVSS Score
6.5
EPSS Score
0.003
Published
2019-02-10