VYPR

Binaryen

by Binaryen

CVEs (2)

  • CVE-2019-7700MedFeb 10, 2019
    risk 0.35cvss 6.5epss 0.01

    A heap-based buffer over-read was discovered in wasm::WasmBinaryBuilder::visitCall in wasm-binary.cpp in Binaryen 1.38.22. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm-merge.

  • CVE-2019-7151MedJan 29, 2019
    risk 0.35cvss 6.5epss 0.01

    A NULL pointer dereference was discovered in wasm::Module::getFunctionOrNull in wasm/wasm.cpp in Binaryen 1.38.22. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by wasm-opt.