CVE-2019-15758

2019-08-2902:15:10

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.2%

JSON

An issue was discovered in Binaryen 1.38.32. Missing validation rules in asmjs/asmangle.cpp can lead to an Assertion Failure at wasm/wasm.cpp in wasm::asmangle. A crafted input can cause denial-of-service, as demonstrated by wasm2js.

CPENameOperatorVersion
binaryeneqersion_70
binaryeneqersion_88
binaryeneq1.37.10
binaryeneq1.37.2
binaryeneqersion_12
binaryeneqersion_32
binaryeneq1.37.4
binaryeneqersion_33
binaryeneq1.37.3
binaryeneq1.37.20

Name	Operator	Version
binaryen	eq	ersion_70
binaryen	eq	ersion_88
binaryen	eq	1.37.10
binaryen	eq	1.37.2
binaryen	eq	ersion_12
binaryen	eq	ersion_32
binaryen	eq	1.37.4
binaryen	eq	ersion_33
binaryen	eq	1.37.3
binaryen	eq	1.37.20