CVE-2020-18378

CVE-2020-18378 affects Binaryen 1.38.26. A NULL pointer dereference in SExpressionWasmBuilder::makeBlock (wasm/wasm-s-parser.c) can cause a segmentation fault and denial-of-service when processing crafted wasm input. The connected PT-2023-11493 entry reiterates Binaryen 1.38.26 as vulnerable and ...

CVE-2020-18382

Affected software: Binaryen 1.38.26. Vulnerability: heap-buffer-overflow in wasm::WasmBinaryBuilder::visitBlock(wasm::Block*) within src/wasm/wasm-binary.cpp, causing a segmentation fault and denial-of-service when processing crafted wasm inputs (as demonstrated by wasm-opt). Impact: denial-of-se...