CVE-2017-7854

The consumeinitexpr function in wasm.c in radare2 1.3.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted Web Assembly file...

CVE-2017-7854

The CVE-2017-7854 entry concerns radare2 1.3.0, where the consume_init_expr function in wasm.c allows a remote attacker to trigger a denial of service via a crafted WebAssembly file. The vulnerability is described as a heap-based buffer over-read leading to an application crash. Public documents ...