1111 matches found
CVE-2019-7151
A NULL pointer dereference was discovered in wasm::Module::getFunctionOrNull in wasm/wasm.cpp in Binaryen 1.38.22. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by wasm-opt...
CVE-2019-7152
CVE-2019-7152 affects Binaryen 1.38.22. A heap-based buffer over-read in wasm-binary.cpp (WasmBinaryBuilder::processFunctions, via getFunctionIndexName) can cause segmentation faults and denial-of-service when processing crafted input (e.g., via wasm-opt). The provided documents do not specify a ...
CVE-2019-7151
A NULL pointer dereference was discovered in wasm::Module::getFunctionOrNull in wasm/wasm.cpp in Binaryen 1.38.22. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by wasm-opt...
CVE-2019-7151: NULL Pointer Dereference
A NULL pointer dereference was discovered in wasm::Module::getFunctionOrNull in wasm/wasm.cpp in Binaryen 1.38.22. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by wasm-opt...
CVE-2018-16765
In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service application crash or possibly have unspecified other impact because of an unspecified "heap-buffer-overflow" condition in FunctionValidationContext::else...
Google Chrome < 62.0.3202.89 Multiple Vulnerabilities
Binary data 700348.pasl...
Google Chrome < 61.0.3163.100 Multiple Vulnerabilities
Binary data 700344.pasl...
Staying Safe in the Era of Browser-based Cryptocurrency Mining
Qualys Malware Research Labs is announcing the release of Qualys BrowserCheck CoinBlocker Chrome extension to detect and block browser-based cryptocurrency mining, aka cryptojacking. Cryptojacking Cryptojacking attacks leverage the victim system’s resources via malicious JavaScript to mine certai...
bloaty/fuzz_target: Global-buffer-overflow in bloaty::wasm::Section::Read
Project: https://github.com/google/bloaty.git Detailed report: https://oss-fuzz.com/testcase?key=5887976193130496 Project: bloaty Fuzzer: aflbloatyfuzztarget Fuzz target binary: fuzztarget Job Type: aflasanbloaty Platform Id: linux Crash Type: Global-buffer-overflow READ 8 Crash Address:...
WebAssembly Changes Could Ruin Meltdown/Spectre Browser Patches
Upcoming changes to the WebAssembly Wasm format may defang the browser patches for infamous side-channel attacks Meltdown and Spectre. Wasm was invented to improve execution speed for porting desktop applications to web-based environments; programs are compiled in Wasm and then can easily be run ...
CVE-2018-11378
The wasmdis function in libr/asm/arch/wasm/wasm.c in or possibly have unspecified other impact via a crafted WASM file...
CVE-2018-11378
The wasmdis function in libr/asm/arch/wasm/wasm.c in or possibly have unspecified other impact via a crafted WASM file...
Design/Logic Flaw
The wasmdis function in libr/asm/arch/wasm/wasm.c in or possibly have unspecified other impact via a crafted WASM file...
UBUNTU-CVE-2018-11378
The wasmdis function in libr/asm/arch/wasm/wasm.c in or possibly have unspecified other impact via a crafted WASM file...
CVE-2018-11378
The wasmdis function in libr/asm/arch/wasm/wasm.c in or possibly have unspecified other impact via a crafted WASM file...
CVE-2018-11378
The wasmdis function in libr/asm/arch/wasm/wasm.c in or possibly have unspecified other impact via a crafted WASM file...
CVE-2018-11378
The wasmdis function in libr/asm/arch/wasm/wasm.c in or possibly have unspecified other impact via a crafted WASM file...
CVE-2018-11378
RADARE2 before version 2.6.0-1 is affected by CVE-2018-11378 due to a stack-buffer overflow in wasm_dis() in libr/asm/arch/wasm/wasm.c, which may lead to denial-of-service or other unspecified impact via a crafted WASM file. The Arch Linux advisory ASA-201806-2 documents this alongside other CVEs...
CVE-2018-11378: Improper Restriction of Operations within the Bounds of a Memory Buffer
The wasmdis function in libr/asm/arch/wasm/wasm.c in or possibly have unspecified other impact via a crafted WASM file...
