CVE Browser

wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platforms, aka a "table flip" attack. It does…

WebAssembly Binaryen BrOn wasm-ir-builder.cpp makeBrOn assertion

WebAssembly wabt wasm-decompile VarName out-of-bounds

WebAssembly wabt wasm-decompile InsertNode memory corruption

WebAssembly Binaryen IRBuilder wasm-ir-builder.cpp makeLocalTee null pointer dereference

WebAssembly Binaryen wasm-binary.cpp readExport heap-based overflow

WebAssembly wabt binary-reader-interp.cc GetFuncOffset use after free

WebAssembly wabt binary-reader-interp.cc OnDataCount resource consumption

WebAssembly wabt binary-reader-objdump.cc LogOpcode assertion

WebAssembly wabt binary-reader-interp.cc BeginFunctionBody null pointer dereference

WebAssembly wabt binary-reader-interp.cc GetReturnCallDropKeepCount heap-based overflow

WebAssembly wabt Malformed File binary-reader-interp.cc OnExport heap-based overflow

WebAssembly wabt 1.0.33 contains an Out-of-Bound Memory Write in DataSegment::Drop(), which lead to segmentation fault.

WebAssembly wabt 1.0.33 has an Out-of-Bound Memory Read in in DataSegment::IsValidRange(), which lead to segmentation fault.

Heap-buffer-overflow in /src/wasm/wasm-binary.cpp in wasm::WasmBinaryBuilder::visitBlock(wasm::Block*) in Binaryen 1.38.26. A crafted wasm input can cause a se…

A NULL pointer dereference was discovered in SExpressionWasmBuilder::makeBlock in wasm/wasm-s-parser.c in Binaryen 1.38.26. A crafted wasm input can cause a se…

wasm2c: DoS via crafted binary

WebAssembly wat2wasm v1.0.32 allows attackers to cause a libc++abi.dylib crash by putting '@' before a quote (").

WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::Decompiler::WrapChild.

WebAssembly v1.0.29 was discovered to contain a heap overflow via the component component wabt::Node::operator.

WebAssembly v1.0.29 discovered to contain an abort in CWriter::MangleType.

WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::cat_compute_size.

wasm2c v1.0.29 was discovered to contain an abort in CWriter::Write.

wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallIndirectExpr->GetReturnCallDropKeepCount.

wasm-interp v1.0.29 was discovered to contain a heap overflow via the component std::vector<wabt::Type, std::allocator<wabt::Type>>::size() at /bits/stl_vector…