1292 matches found
CVE-2020-15681
When multiple WASM threads had a reference to a module, and were looking up exported functions, one WASM thread could have overwritten another's entry in a shared stub table, resulting in a potentially exploitable crash. This vulnerability affects Firefox 82...
PT-2020-6741
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 82 Description The issue is related to errors in resource management, specifically when multiple WASM threads access exported functions from a shared module, potentially leading to a crash. This could be exploited by ...
Security Vulnerabilities fixed in Firefox 82 — Mozilla
A use-after-free bug in the usersctp library was reported upstream. We assume this could have led to memory corruption and a potentially exploitable crash. In the crossbeam rust crate, the bounded channel incorrectly assumed that Vec::fromiter had allocated capacity that was the same as the numbe...
stdweb is unmaintained
The author of the stdweb crate is unresponsive. Maintained alternatives: - wasm-bindgen - js-sys - web-sys...
RUSTSEC-2020-0056 stdweb is unmaintained
The author of the stdweb crate is unresponsive. Maintained alternatives: - wasm-bindgen - js-sys - web-sys...
lightbeam (>=0.7.0, <=0.15.0), llama-wasm (>=0.1.0, <=0.5.0) +1 more potentially affected by unknown CVE via multi_mut (0.1.3)
multimut CARGO version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on multimut and may be impacted: - lightbeam =0.7.0, =0.1.0, =0.7.0, =0.15.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0169...
RUSTSEC-2020-0004 sigstack allocation bug can cause memory corruption or leak
An embedding using affected versions of lucet-runtime configured to use non-default Wasm globals sizes of more than 4KiB, or compiled in debug mode without optimizations, could leak data from the signal handler stack to guest programs. This can potentially cause data from the embedding host to le...
PT-2020-17491
Name of the Vulnerable Software and Affected Versions lucet-runtime-internals versions prior to 0.5.1 Description The issue is related to the mishandling of sigstack allocation in the lucet-runtime-internals crate. This can potentially allow guest programs to obtain sensitive information or...
DEBIAN-CVE-2019-15758
An issue was discovered in Binaryen 1.38.32. Missing validation rules in asmjs/asmangle.cpp can lead to an Assertion Failure at wasm/wasm.cpp in wasm::asmangle. A crafted input can cause denial-of-service, as demonstrated by wasm2js...
CVE-2019-15759
An issue was discovered in Binaryen 1.38.32. Two visitors in ir/ExpressionManipulator.cpp can lead to a NULL pointer dereference in wasm::LocalSet::finalize in wasm/wasm.cpp. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by wasm2js...
CVE-2019-15758
An issue was discovered in Binaryen 1.38.32. Missing validation rules in asmjs/asmangle.cpp can lead to an Assertion Failure at wasm/wasm.cpp in wasm::asmangle. A crafted input can cause denial-of-service, as demonstrated by wasm2js...
CVE-2019-15759
An issue was discovered in Binaryen 1.38.32. Two visitors in ir/ExpressionManipulator.cpp can lead to a NULL pointer dereference in wasm::LocalSet::finalize in wasm/wasm.cpp. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by wasm2js...
CVE-2019-15758
An issue was discovered in Binaryen 1.38.32. Missing validation rules in asmjs/asmangle.cpp can lead to an Assertion Failure at wasm/wasm.cpp in wasm::asmangle. A crafted input can cause denial-of-service, as demonstrated by wasm2js...
CVE-2019-15758
An issue was discovered in Binaryen 1.38.32. Missing validation rules in asmjs/asmangle.cpp can lead to an Assertion Failure at wasm/wasm.cpp in wasm::asmangle. A crafted input can cause denial-of-service, as demonstrated by wasm2js...
CVE-2019-15758
An issue was discovered in Binaryen 1.38.32. Missing validation rules in asmjs/asmangle.cpp can lead to an Assertion Failure at wasm/wasm.cpp in wasm::asmangle. A crafted input can cause denial-of-service, as demonstrated by wasm2js...
CVE-2019-15759
An issue was discovered in Binaryen 1.38.32. Two visitors in ir/ExpressionManipulator.cpp can lead to a NULL pointer dereference in wasm::LocalSet::finalize in wasm/wasm.cpp. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by wasm2js...
CVE-2019-15759
CVE-2019-15759 affects Binaryen 1.38.32. Two visitors in ir/ExpressionManipulator.cpp can trigger a NULL pointer dereference in wasm::LocalSet::finalize within wasm/wasm.cpp, leading to segmentation faults and denial-of-service (as demonstrated by wasm2js). Connected sources (NVD, Red Hat, OSV, U...
CVE-2019-15759: NULL Pointer Dereference
An issue was discovered in Binaryen 1.38.32. Two visitors in ir/ExpressionManipulator.cpp can lead to a NULL pointer dereference in wasm::LocalSet::finalize in wasm/wasm.cpp. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by wasm2js...
PT-2019-14374
Name of the Vulnerable Software and Affected Versions Binaryen version 1.38.32 Description An issue in Binaryen allows for denial-of-service through a crafted input, leading to an Assertion Failure. This occurs due to missing validation rules in asmjs/asmangle.cpp, affecting the wasm::asmangle...