Vulnerabilities > Webassembly > Medium

DATE CVE VULNERABILITY TITLE RISK
2019-02-10 CVE-2019-7702 NULL Pointer Dereference vulnerability in Webassembly Binaryen
A NULL pointer dereference was discovered in wasm::SExpressionWasmBuilder::parseExpression in wasm-s-parser.cpp in Binaryen 1.38.22.
4.3
2019-02-10 CVE-2019-7701 Out-of-bounds Read vulnerability in Webassembly Binaryen
A heap-based buffer over-read was discovered in wasm::SExpressionParser::skipWhitespace() in wasm-s-parser.cpp in Binaryen 1.38.22.
4.3
2019-02-10 CVE-2019-7700 Out-of-bounds Read vulnerability in Webassembly Binaryen
A heap-based buffer over-read was discovered in wasm::WasmBinaryBuilder::visitCall in wasm-binary.cpp in Binaryen 1.38.22.
4.3
2019-01-29 CVE-2019-7154 Out-of-bounds Write vulnerability in Webassembly Binaryen
The main function in tools/wasm2js.cpp in Binaryen 1.38.22 has a heap-based buffer overflow because Emscripten is misused, triggering an error in cashew::JSPrinter::printAst() in emscripten-optimizer/simple_ast.h.
4.3
2019-01-29 CVE-2019-7153 NULL Pointer Dereference vulnerability in Webassembly Binaryen
A NULL pointer dereference was discovered in wasm::WasmBinaryBuilder::processFunctions() in wasm/wasm-binary.cpp (when calling wasm::WasmBinaryBuilder::getFunctionIndexName) in Binaryen 1.38.22.
4.3
2019-01-29 CVE-2019-7152 Out-of-bounds Read vulnerability in Webassembly Binaryen
A heap-based buffer over-read was discovered in wasm::WasmBinaryBuilder::processFunctions() in wasm/wasm-binary.cpp (when calling wasm::WasmBinaryBuilder::getFunctionIndexName) in Binaryen 1.38.22.
4.3
2019-01-29 CVE-2019-7151 NULL Pointer Dereference vulnerability in Webassembly Binaryen
A NULL pointer dereference was discovered in wasm::Module::getFunctionOrNull in wasm/wasm.cpp in Binaryen 1.38.22.
4.3