CVE-2019-15758 - An issue was discovered in Binaryen 1.38.32

Back Back to CVE browser

MEDIUM

An issue was discovered in Binaryen 1.38.32

Published Aug 29, 2019

6.5

MEDIUM

CVSS 3.1

EPSS 1.24%

Description

An issue was discovered in Binaryen 1.38.32. Missing validation rules in asmjs/asmangle.cpp can lead to an Assertion Failure at wasm/wasm.cpp in wasm::asmangle. A crafted input can cause denial-of-service, as demonstrated by wasm2js.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-617

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-6689
Advisory
https://github.com/WebAssembly/binaryen/issues/2288
x_refsource_MISCExploitPatchThird Party Advisory
https://github.com/WebAssembly/binaryen/pull/2290
x_refsource_MISCPatchThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-6689		Advisory
https://github.com/WebAssembly/binaryen/issues/2288		x_refsource_MISCExploitPatchThird Party Advisory
https://github.com/WebAssembly/binaryen/pull/2290		x_refsource_MISCPatchThird Party Advisory