977 matches found
Linux Distros Unpatched Vulnerability : CVE-2022-34502
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Radare2 v5.7.0 was discovered to contain a heap buffer overflow via the function consumeencodednamenew at format/wasm/wasm.c. This vulnerability allows attacker...
Linux Distros Unpatched Vulnerability : CVE-2021-46055
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::WasmBinaryBuilder::visitRethrowwasm::Rethrow. CVE-2021-46055 Note th...
Linux Distros Unpatched Vulnerability : CVE-2023-27114
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - radare2 v5.8.3 was discovered to contain a segmentation fault via the component wasmdis at p/wasm/wasm.c. CVE-2023-27114 Note that Nessus relies on the presence...
Linux Distros Unpatched Vulnerability : CVE-2021-46054
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::WasmBinaryBuilder::visitRethrowwasm::Rethrow. CVE-2021-46054 Note th...
Linux Distros Unpatched Vulnerability : CVE-2021-46052
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::Tuple::validate. CVE-2021-46052 Note that Nessus relies on the...
Linux Distros Unpatched Vulnerability : CVE-2020-18378
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference was discovered in SExpressionWasmBuilder::makeBlock in wasm/wasm-s-parser.c in Binaryen 1.38.26. A crafted wasm input can cause a...
Linux Distros Unpatched Vulnerability : CVE-2019-7700
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer over-read was discovered in wasm::WasmBinaryBuilder::visitCall in wasm-binary.cpp in Binaryen 1.38.22. A crafted wasm input can cause a...
Linux Distros Unpatched Vulnerability : CVE-2019-7152
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer over-read was discovered in wasm::WasmBinaryBuilder::processFunctions in wasm/wasm- binary.cpp when calling...
Linux Distros Unpatched Vulnerability : CVE-2019-7151
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference was discovered in wasm::Module::getFunctionOrNull in wasm/wasm.cpp in Binaryen 1.38.22. A crafted input can cause segmentation faults...
Linux Distros Unpatched Vulnerability : CVE-2017-5132
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in V8 in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML...
Important: firefox
Issue Overview: On 64-bit platforms IonMonkey-JIT only wrote 32 bits of the 64-bit return value space on the stack. Baseline-JIT, however, read the entire 64 bits. This vulnerability affects Firefox 141, Firefox ESR 115.26, Firefox ESR 128.13, Firefox ESR 140.1, Thunderbird 141, Thunderbird 128.1...
Malicious code in rnnoise-wasm (npm)
The package rnnoise-wasm was found to contain malicious code...
MAL-2025-32321 Malicious code in rnnoise-wasm (npm)
The package rnnoise-wasm was found to contain malicious code...
firefox: thunderbird: Large branch table could lead to truncated instruction
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: On arm64, a WASM brtable instruction with a large number of entries could lead to the label being too far from the instruction, causing truncation and incorrect computation of th...
Linux Distros Unpatched Vulnerability : CVE-2025-8028
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - On arm64, a WASM brtable instruction with a lot of entries could lead to the label being too far from the instruction causing truncation and incorrect computati...
Linux Distros Unpatched Vulnerability : CVE-2024-6613
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The frame iterator could get stuck in a loop when encountering certain wasm frames leading to incorrect stack traces. This vulnerability affects Firefox 128 and...
Linux Distros Unpatched Vulnerability : CVE-2022-31740
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - On arm64, WASM code could have resulted in incorrect assembly generation leading to a register allocation problem, and a potentially exploitable crash. This...
firefox: thunderbird: Large branch table could lead to truncated instruction
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: On arm64, a WASM brtable instruction with a large number of entries could lead to the label being too far from the instruction, causing truncation and incorrect computation of th...
Linux Distros Unpatched Vulnerability : CVE-2022-40957
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inconsistent data in instruction and data cache when creating wasm code could lead to a potentially exploitable crash.This bug only affects Firefox on ARM64...
Linux Distros Unpatched Vulnerability : CVE-2021-43539
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Failure to correctly record the location of live pointers across wasm instance calls resulted in a GC occurring within the call not tracing those live pointers...