golang: Command-line arguments may overwrite global data

A flaw was found in golang. This vulnerability can only be triggered when invoking functions from vulnerable WASM WebAssembly Modules. Go can be compiled to WASM. If the product or service doesn't use WASM functions, it is not affected, although it uses golang...

[SECURITY] Fedora 35 Update: binaryen-105-1.fc35

Binaryen is a compiler and toolchain infrastructure library for WebAssembly, written in C++. It aims to make compiling to WebAssembly easy, fast, and effective: Easy: Binaryen has a simple C API in a single header, and can also be used from JavaScript. It accepts input in WebAssembly-like form bu...

[SECURITY] Fedora 34 Update: binaryen-105-1.fc34

Binaryen is a compiler and toolchain infrastructure library for WebAssembly, written in C++. It aims to make compiling to WebAssembly easy, fast, and effective: Easy: Binaryen has a simple C API in a single header, and can also be used from JavaScript. It accepts input in WebAssembly-like form bu...

CVE-2022-21685 Integer underflow in Frontier

Frontier is Substrate's Ethereum compatibility layer. Prior to commit number 8a93fdc6c9f4eb1d2f2a11b7ff1d12d70bf5a664, a bug in Frontier's MODEXP precompile implementation can cause an integer underflow in certain conditions. This will cause a node crash for debug builds. For release builds and...

Binaryen Denial of Service Vulnerability

Binaryen is a compiler infrastructure and toolchain library for WebAssembly written in C++. Binaryen suffers from a denial of service vulnerability in version 104, which stems from an assertion abort in the software wasm::WasmBinaryBuilder::VisitRetrow, that can be exploited by an attacker to cau...

Binaryen Denial of Service Vulnerability

Binaryen is a compiler infrastructure and toolchain library for WebAssembly written in C++. A denial of service vulnerability exists in Binaryen version 104, which stems from an assertion abort in the software wasm::Tuple::validate, and could be exploited by an attacker to cause a denial of servi...

Binaryen Stack Buffer Overflow Vulnerability

Binaryen is a compiler infrastructure and toolchain library for WebAssembly written in C++. Binaryen has a stack buffer overflow vulnerability in version 103, which originates when the software printf public function performs an operation in memory, and can be exploited by an attacker to cause...

Binaryen Denial of Service Vulnerability (CNVD-2022-06886)

Binaryen 104 is a compiler infrastructure and toolchain library for WebAssembly written in C. A denial of service vulnerability exists in Binaryen 104, which stems from an assertion abort in the software wasm::WasmBinaryBuilder::visitRethrowwasm::Rethrow. , which can be exploited by an attacker t...

Binaryen Denial of Service Vulnerability

Binaryen is a compiler infrastructure and toolchain library for WebAssembly written in C. A security vulnerability exists in Binaryen version 104, which stems from an assertion abort in wasm::WasmBinaryBuilder::readFunctions in the software, and could be exploited by an attacker to cause a denial...

DEBIAN-CVE-2021-46054

A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::WasmBinaryBuilder::visitRethrowwasm::Rethrow...

CVE-2021-46052

A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::Tuple::validate...

DEBIAN-CVE-2021-46052

A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::Tuple::validate...

UBUNTU-CVE-2021-46048

A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::WasmBinaryBuilder::readFunctions...

Binaryen 安全漏洞

Binaryen 104 is a compiler infrastructure and toolchain library for WebAssembly written in C. A denial of service vulnerability exists in Binaryen 104, which stems from an assertion abort in the software wasm::WasmBinaryBuilder::visitRethrowwasm::Rethrow. , which can be exploited by an attacker t...

Wasm 缓冲区错误漏洞

wasm3 is the fastest WebAssembly interpreter, as well as the most versatile runtime. A security vulnerability exists in Wasm3 0.5.0 that stems from an out-of-bounds write called from EvaluateExpression and InitDataSegments in the runtime version...

Binaryen Denial of Service Vulnerability (CNVD-2022-06889)

Binaryen is a compiler and toolchain infrastructure library for WebAssembly, written in C. A denial of service vulnerability exists in Binaryen 103, which stems from an assertion failure in wasm::handleunreachable and can be exploited by an attacker to cause a denial of service...

Binaryen Denial of Service Vulnerability (CNVD-2022-06888)

Binaryen is a compiler and toolchain infrastructure library for WebAssembly written in C. A denial of service vulnerability exists in Binaryen 103, which stems from an invalid memory address dereference in wasm::WasmBinaryBuilder::visitLet, and could be exploited by an attacker to cause a denial ...

Binaryen 代码问题漏洞

Binaryen is a compiler and toolchain infrastructure library for WebAssembly, written in C. A denial of service vulnerability exists in Binaryen 103, which stems from an assertion failure in wasm::handleunreachable and can be exploited by an attacker to cause a denial of service...

Binaryen 缓冲区错误漏洞

Binaryen is a compiler and toolchain infrastructure library for WebAssembly written in C. A denial of service vulnerability exists in Binaryen 103, which stems from an invalid memory address dereference in wasm::WasmBinaryBuilder::visitLet, and could be exploited by an attacker to cause a denial ...

Mozilla: GC rooting failure when calling wasm instance methods

The Mozilla Foundation Security Advisory describes this flaw as: Failure to correctly record the location of live pointers across wasm instance calls resulted in a GC occurring within the call not tracing those live pointers. This could have led to a use-after-free causing a potentially exploitab...