2 matches found
Null pointer dereference
An issue was discovered in WAVM before 2018-09-16. The run function in Programs/wavm/wavm.cpp does not check whether there is Emscripten memory to store the command-line arguments passed by the input WebAssembly file's main function, which allows attackers to cause a denial of service application...
WAVM Denial of Service Vulnerability (CNVD-2019-09769)
WAVM is the WebAssembly Virtual Machine. A denial-of-service vulnerability exists in versions of WAVM prior to 2018-09-16, which stems from the 'run' function in the Programs/wavm/wavm.cpp file failing to detect whether Emscripten memory holds command-line arguments, which can be exploited by an...