Vulnerabilities > CVE-2018-16766 - Always-Incorrect Control Flow Implementation vulnerability in Webassembly Virtual Machine Project Webassembly Virtual Machine

CVSS 6.8 - MEDIUM

Attack vector

NETWORK

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

network

webassembly-virtual-machine-project

CWE-670

NVD

Published: 2018-09-10

Updated: 2020-08-24

Summary

In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because Errors::unreachable() is reached.

Vulnerable Configurations

Part	Description	Count
Application	Webassembly_Virtual_Machine_Project Webassembly Virtual Machine Project Webassembly Virtual Machine 2017-02-10 Webassembly Virtual Machine Project Webassembly Virtual Machine 2017-02-28 Webassembly Virtual Machine Project Webassembly Virtual Machine 2017-03-08 Webassembly Virtual Machine Project Webassembly Virtual Machine 2017-03-13 Webassembly Virtual Machine Project Webassembly Virtual Machine 2017-03-27 Webassembly Virtual Machine Project Webassembly Virtual Machine 2017-03-28 Webassembly Virtual Machine Project Webassembly Virtual Machine 2017-04-03 Webassembly Virtual Machine Project Webassembly Virtual Machine 2017-04-04 Webassembly Virtual Machine Project Webassembly Virtual Machine 2017-04-19 Webassembly Virtual Machine Project Webassembly Virtual Machine 2017-04-20 Webassembly Virtual Machine Project Webassembly Virtual Machine 2017-04-22 Webassembly Virtual Machine Project Webassembly Virtual Machine 2017-04-24 Webassembly Virtual Machine Project Webassembly Virtual Machine 2017-04-26 Webassembly Virtual Machine Project Webassembly Virtual Machine 2017-05-02 Webassembly Virtual Machine Project Webassembly Virtual Machine 2017-05-05 Webassembly Virtual Machine Project Webassembly Virtual Machine 2017-05-17 Webassembly Virtual Machine Project Webassembly Virtual Machine 2017-05-18 Webassembly Virtual Machine Project Webassembly Virtual Machine 2017-05-29 Webassembly Virtual Machine Project Webassembly Virtual Machine 2017-06-07 Webassembly Virtual Machine Project Webassembly Virtual Machine 2017-06-09 Webassembly Virtual Machine Project Webassembly Virtual Machine 2017-06-18 Webassembly Virtual Machine Project Webassembly Virtual Machine 2017-06-19 Webassembly Virtual Machine Project Webassembly Virtual Machine 2017-06-20 Webassembly Virtual Machine Project Webassembly Virtual Machine 2017-06-23 Webassembly Virtual Machine Project Webassembly Virtual Machine 2017-06-28 Webassembly Virtual Machine Project Webassembly Virtual Machine 2017-06-29 Webassembly Virtual Machine Project Webassembly Virtual Machine 2017-08-29 Webassembly Virtual Machine Project Webassembly Virtual Machine 2017-09-07 Webassembly Virtual Machine Project Webassembly Virtual Machine 2017-10-29 Webassembly Virtual Machine Project Webassembly Virtual Machine 2017-10-30 Webassembly Virtual Machine Project Webassembly Virtual Machine 2017-11-01 Webassembly Virtual Machine Project Webassembly Virtual Machine 2017-11-09 Webassembly Virtual Machine Project Webassembly Virtual Machine 2017-11-27 Webassembly Virtual Machine Project Webassembly Virtual Machine 2017-12-02 Webassembly Virtual Machine Project Webassembly Virtual Machine 2017-12-03 Webassembly Virtual Machine Project Webassembly Virtual Machine 2017-12-04 Webassembly Virtual Machine Project Webassembly Virtual Machine 2017-12-05 Webassembly Virtual Machine Project Webassembly Virtual Machine 2017-12-06 Webassembly Virtual Machine Project Webassembly Virtual Machine 2017-12-08 Webassembly Virtual Machine Project Webassembly Virtual Machine 2017-12-26 Webassembly Virtual Machine Project Webassembly Virtual Machine 2017-1116 Webassembly Virtual Machine Project Webassembly Virtual Machine 2018-01-12 Webassembly Virtual Machine Project Webassembly Virtual Machine 2018-01-13 Webassembly Virtual Machine Project Webassembly Virtual Machine 2018-02-12 Webassembly Virtual Machine Project Webassembly Virtual Machine 2018-03-06 Webassembly Virtual Machine Project Webassembly Virtual Machine 2018-03-07 Webassembly Virtual Machine Project Webassembly Virtual Machine 2018-03-08 Webassembly Virtual Machine Project Webassembly Virtual Machine 2018-03-09 Webassembly Virtual Machine Project Webassembly Virtual Machine 2018-03-13 Webassembly Virtual Machine Project Webassembly Virtual Machine 2018-03-21 Webassembly Virtual Machine Project Webassembly Virtual Machine 2018-04-03 Webassembly Virtual Machine Project Webassembly Virtual Machine 2018-04-04 Webassembly Virtual Machine Project Webassembly Virtual Machine 2018-04-19 Webassembly Virtual Machine Project Webassembly Virtual Machine 2018-04-21 Webassembly Virtual Machine Project Webassembly Virtual Machine 2018-05-01 Webassembly Virtual Machine Project Webassembly Virtual Machine 2018-05-02 Webassembly Virtual Machine Project Webassembly Virtual Machine 2018-05-06 Webassembly Virtual Machine Project Webassembly Virtual Machine 2018-05-07 Webassembly Virtual Machine Project Webassembly Virtual Machine 2018-05-10 Webassembly Virtual Machine Project Webassembly Virtual Machine 2018-05-11 Webassembly Virtual Machine Project Webassembly Virtual Machine 2018-05-15 Webassembly Virtual Machine Project Webassembly Virtual Machine 2018-05-23 Webassembly Virtual Machine Project Webassembly Virtual Machine 2018-05-31 Webassembly Virtual Machine Project Webassembly Virtual Machine 2018-06-02 Webassembly Virtual Machine Project Webassembly Virtual Machine 2018-06-05 Webassembly Virtual Machine Project Webassembly Virtual Machine 2018-06-14 Webassembly Virtual Machine Project Webassembly Virtual Machine 2018-07-25 Webassembly Virtual Machine Project Webassembly Virtual Machine 2018-07-26	68

Common Weakness Enumeration (CWE)

CWE-670 - Always-Incorrect Control Flow Implementation

References

https://github.com/AndrewScheidecker/WAVM/issues/96