CVE-2019-15759

CVE-2019-15759 affects Binaryen 1.38.32. Two visitors in ir/ExpressionManipulator.cpp can trigger a NULL pointer dereference in wasm::LocalSet::finalize within wasm/wasm.cpp, leading to segmentation faults and denial-of-service (as demonstrated by wasm2js). Connected sources (NVD, Red Hat, OSV, U...

CVE-2019-15759

An issue was discovered in Binaryen 1.38.32. Two visitors in ir/ExpressionManipulator.cpp can lead to a NULL pointer dereference in wasm::LocalSet::finalize in wasm/wasm.cpp. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by wasm2js...

CVE-2019-15759

An issue was discovered in Binaryen 1.38.32. Two visitors in ir/ExpressionManipulator.cpp can lead to a NULL pointer dereference in wasm::LocalSet::finalize in wasm/wasm.cpp. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by wasm2js...

Binaryen Code Issue Vulnerability

Binaryen is a compiler infrastructure and toolchain library for WebAssembly written in C++. Binaryen is vulnerable to a code issue. An attacker could exploit this vulnerability via specially crafted input to cause a segmentation error, which could result in a denial of service...

Binaryen Input Validation Error Vulnerability

Binaryen is a compiler infrastructure and toolchain library for WebAssembly written in C++. Binaryen suffers from an input validation error vulnerability. An attacker could exploit this vulnerability to cause a denial of service with specially crafted input...

Unspecified vulnerability in Binaryen (CNVD-2019-34837)

Binaryen is a compiler infrastructure and toolchain library for WebAssembly written in C++. An unspecified vulnerability exists in Binaryen. An attacker can exploit this vulnerability to cause a denial of service with specially crafted input...

Unspecified vulnerability in Binaryen (CNVD-2019-34844)

Binaryen is a compiler infrastructure and toolchain library for WebAssembly written in C++. An unspecified vulnerability exists in Binaryen. An attacker can exploit this vulnerability to cause a denial of service via a wasm file...

Binaryen Input Validation Vulnerability

Binaryen is a compiler infrastructure and toolchain library for WebAssembly written in C++. Binaryen suffers from an input validation vulnerability. An attacker can exploit this vulnerability to cause a denial of service assertion failure and crash with the help of a specially crafted wasm file...

Binaryen Buffer Overflow Vulnerability (CNVD-2019-34839)

Binaryen is a compiler and toolchain infrastructure library written in C++. Binaryen suffers from a buffer overflow vulnerability. An attacker could exploit this vulnerability to cause a denial of service with specially crafted input...

Binaryen Buffer Overflow Vulnerability (CNVD-2019-34838)

Binaryen is a compiler infrastructure and toolchain library for WebAssembly written in C++. Binaryen suffers from a buffer overflow vulnerability. An attacker can exploit this vulnerability to cause a denial of service with specially crafted input...

Unspecified Vulnerability in Binaryen

Binaryen is a compiler infrastructure and toolchain library for WebAssembly written in C++. An unspecified vulnerability exists in Binaryen. An attacker can exploit the vulnerability with specially crafted input to cause a segmentation error...

DEBIAN-CVE-2019-7701

A heap-based buffer over-read was discovered in wasm::SExpressionParser::skipWhitespace in wasm-s-parser.cpp in Binaryen 1.38.22. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm2js...

CVE-2019-7701

A heap-based buffer over-read was discovered in wasm::SExpressionParser::skipWhitespace in wasm-s-parser.cpp in Binaryen 1.38.22. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm2js...

CVE-2019-7703

In Binaryen 1.38.22, there is a use-after-free problem in wasm::WasmBinaryBuilder::visitCall in wasm-binary.cpp. Remote attackers could leverage this vulnerability to cause a denial-of-service via a wasm file, as demonstrated by wasm-merge...

Null pointer dereference

A NULL pointer dereference was discovered in wasm::SExpressionWasmBuilder::parseExpression in wasm-s-parser.cpp in Binaryen 1.38.22. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm-as...

Heap overflow

A heap-based buffer over-read was discovered in wasm::SExpressionParser::skipWhitespace in wasm-s-parser.cpp in Binaryen 1.38.22. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm2js...

DEBIAN-CVE-2019-7702

A NULL pointer dereference was discovered in wasm::SExpressionWasmBuilder::parseExpression in wasm-s-parser.cpp in Binaryen 1.38.22. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm-as...

CVE-2019-7702

A NULL pointer dereference was discovered in wasm::SExpressionWasmBuilder::parseExpression in wasm-s-parser.cpp in Binaryen 1.38.22. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm-as...

Design/Logic Flaw

In Binaryen 1.38.22, there is a use-after-free problem in wasm::WasmBinaryBuilder::visitCall in wasm-binary.cpp. Remote attackers could leverage this vulnerability to cause a denial-of-service via a wasm file, as demonstrated by wasm-merge...

CVE-2019-7703

In Binaryen 1.38.22, there is a use-after-free problem in wasm::WasmBinaryBuilder::visitCall in wasm-binary.cpp. Remote attackers could leverage this vulnerability to cause a denial-of-service via a wasm file, as demonstrated by wasm-merge...