Vulnerabilities > Webassembly

DATE CVE VULNERABILITY TITLE RISK
2019-01-29 CVE-2019-7154 Out-of-bounds Write vulnerability in Webassembly Binaryen
The main function in tools/wasm2js.cpp in Binaryen 1.38.22 has a heap-based buffer overflow because Emscripten is misused, triggering an error in cashew::JSPrinter::printAst() in emscripten-optimizer/simple_ast.h.
network
low complexity
webassembly CWE-787
6.5
2019-01-29 CVE-2019-7153 NULL Pointer Dereference vulnerability in Webassembly Binaryen
A NULL pointer dereference was discovered in wasm::WasmBinaryBuilder::processFunctions() in wasm/wasm-binary.cpp (when calling wasm::WasmBinaryBuilder::getFunctionIndexName) in Binaryen 1.38.22.
network
low complexity
webassembly CWE-476
6.5
2019-01-29 CVE-2019-7152 Out-of-bounds Read vulnerability in Webassembly Binaryen
A heap-based buffer over-read was discovered in wasm::WasmBinaryBuilder::processFunctions() in wasm/wasm-binary.cpp (when calling wasm::WasmBinaryBuilder::getFunctionIndexName) in Binaryen 1.38.22.
network
low complexity
webassembly CWE-125
6.5
2019-01-29 CVE-2019-7151 NULL Pointer Dereference vulnerability in Webassembly Binaryen
A NULL pointer dereference was discovered in wasm::Module::getFunctionOrNull in wasm/wasm.cpp in Binaryen 1.38.22.
network
low complexity
webassembly CWE-476
6.5