CVE-2018-16768

CVE-2018-16768 affects WAVM (WebAssembly Virtual Machine). A heap-buffer-overflow in IR::FunctionValidationContext::end, triggered by a crafted input file up to 2018-07-26, may cause a denial of service (application crash) and possibly unspecified other impact. The vulnerability is documented acr...

CVE-2018-16764: Out-of-bounds Read

In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service application crash or possibly have unspecified other impact because of an IR::FunctionValidationContext::catchall heap-based buffer over-read...

CVE-2018-16768: Improper Restriction of Operations within the Bounds of a Memory Buffer

In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service application crash or possibly have unspecified other impact because of an unspecified "heap-buffer-overflow" condition in IR::FunctionValidationContext::end...