Vulnerabilities > Webassembly > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-10-23 | CVE-2023-46331 | Out-of-bounds Read vulnerability in Webassembly Binary Toolkit 1.0.33 WebAssembly wabt 1.0.33 has an Out-of-Bound Memory Read in in DataSegment::IsValidRange(), which lead to segmentation fault. | 5.5 |
| 2023-10-23 | CVE-2023-46332 | Out-of-bounds Write vulnerability in Webassembly Binary Toolkit 1.0.33 WebAssembly wabt 1.0.33 contains an Out-of-Bound Memory Write in DataSegment::Drop(), which lead to segmentation fault. | 5.5 |
| 2023-08-22 | CVE-2020-18378 | NULL Pointer Dereference vulnerability in Webassembly Binaryen 1.38.26 A NULL pointer dereference was discovered in SExpressionWasmBuilder::makeBlock in wasm/wasm-s-parser.c in Binaryen 1.38.26. | 6.5 |
| 2023-08-22 | CVE-2020-18382 | Out-of-bounds Write vulnerability in Webassembly Binaryen 1.38.26 Heap-buffer-overflow in /src/wasm/wasm-binary.cpp in wasm::WasmBinaryBuilder::visitBlock(wasm::Block*) in Binaryen 1.38.26. | 6.5 |
| 2023-05-23 | CVE-2023-31669 | Improper Encoding or Escaping of Output vulnerability in Webassembly Binary Toolkit 1.0.32 WebAssembly wat2wasm v1.0.32 allows attackers to cause a libc++abi.dylib crash by putting '@' before a quote ("). | 5.5 |
| 2023-03-10 | CVE-2023-27115 | Unspecified vulnerability in Webassembly 1.0.29 WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::cat_compute_size. | 5.5 |
| 2023-03-10 | CVE-2023-27116 | Unspecified vulnerability in Webassembly 1.0.29 WebAssembly v1.0.29 discovered to contain an abort in CWriter::MangleType. | 5.5 |
| 2023-03-10 | CVE-2023-27119 | Unspecified vulnerability in Webassembly Wabt 1.0.29 WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::Decompiler::WrapChild. | 5.5 |
| 2022-10-28 | CVE-2022-43283 | Unrestricted Upload of File with Dangerous Type vulnerability in Webassembly Wabt 1.0.29 wasm2c v1.0.29 was discovered to contain an abort in CWriter::Write. | 5.5 |
| 2022-01-10 | CVE-2021-46048 | Reachable Assertion vulnerability in Webassembly Binaryen 104 A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::WasmBinaryBuilder::readFunctions. | 4.3 |