Vulnerabilities > Webassembly > Binaryen > Medium

DATE CVE VULNERABILITY TITLE RISK
2019-08-29 CVE-2019-15758 Reachable Assertion vulnerability in Webassembly Binaryen
An issue was discovered in Binaryen 1.38.32.
4.3
2019-02-10 CVE-2019-7704 Allocation of Resources Without Limits or Throttling vulnerability in Webassembly Binaryen
wasm::WasmBinaryBuilder::readUserSection in wasm-binary.cpp in Binaryen 1.38.22 triggers an attempt at excessive memory allocation, as demonstrated by wasm-merge and wasm-opt.
4.3
2019-02-10 CVE-2019-7703 Use After Free vulnerability in Webassembly Binaryen
In Binaryen 1.38.22, there is a use-after-free problem in wasm::WasmBinaryBuilder::visitCall in wasm-binary.cpp.
4.3
2019-02-10 CVE-2019-7702 NULL Pointer Dereference vulnerability in Webassembly Binaryen
A NULL pointer dereference was discovered in wasm::SExpressionWasmBuilder::parseExpression in wasm-s-parser.cpp in Binaryen 1.38.22.
4.3
2019-02-10 CVE-2019-7701 Out-of-bounds Read vulnerability in Webassembly Binaryen
A heap-based buffer over-read was discovered in wasm::SExpressionParser::skipWhitespace() in wasm-s-parser.cpp in Binaryen 1.38.22.
4.3
2019-02-10 CVE-2019-7700 Out-of-bounds Read vulnerability in Webassembly Binaryen
A heap-based buffer over-read was discovered in wasm::WasmBinaryBuilder::visitCall in wasm-binary.cpp in Binaryen 1.38.22.
4.3
2019-01-29 CVE-2019-7154 Out-of-bounds Write vulnerability in Webassembly Binaryen
The main function in tools/wasm2js.cpp in Binaryen 1.38.22 has a heap-based buffer overflow because Emscripten is misused, triggering an error in cashew::JSPrinter::printAst() in emscripten-optimizer/simple_ast.h.
4.3
2019-01-29 CVE-2019-7153 NULL Pointer Dereference vulnerability in Webassembly Binaryen
A NULL pointer dereference was discovered in wasm::WasmBinaryBuilder::processFunctions() in wasm/wasm-binary.cpp (when calling wasm::WasmBinaryBuilder::getFunctionIndexName) in Binaryen 1.38.22.
4.3
2019-01-29 CVE-2019-7152 Out-of-bounds Read vulnerability in Webassembly Binaryen
A heap-based buffer over-read was discovered in wasm::WasmBinaryBuilder::processFunctions() in wasm/wasm-binary.cpp (when calling wasm::WasmBinaryBuilder::getFunctionIndexName) in Binaryen 1.38.22.
4.3
2019-01-29 CVE-2019-7151 NULL Pointer Dereference vulnerability in Webassembly Binaryen
A NULL pointer dereference was discovered in wasm::Module::getFunctionOrNull in wasm/wasm.cpp in Binaryen 1.38.22.
4.3