Skip to content
Noroxi

WebAssembly records

45 published records for vendor webassembly.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
51.1%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19
  2. 21
  3. 22
  4. 23
  5. 25
  6. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

45 records
  • CVE-2022-43281
    31Monitor

    wasm-interp v1.0.29 was discovered to contain a heap overflow via the component std::vector<wabt::Type, std::allocator<wabt::Type>>::size()

    HighCVSS 7.8No exploitEPSS 0%

    webassembly · wasmOct 28, 2022

  • CVE-2023-27117
    31Monitor

    WebAssembly v1.0.29 was discovered to contain a heap overflow via the component component wabt::Node::operator.

    HighCVSS 7.8No exploitEPSS 0%

    webassembly · webassemblyMar 9, 2023

  • CVE-2021-45290
    30Monitor

    A Denial of Service vulnerability exits in Binaryen 103 due to an assertion abort in wasm::handle_unreachable.

    HighCVSS 7.5No exploitEPSS 1%

    webassembly · binaryenDec 21, 2021

  • CVE-2023-31670
    30Monitor

    An issue in wasm2c 1.0.32, wasm2wat 1.0.32, wasm-decompile 1.0.32, and wasm-validate 1.0.32 allows attackers to cause a Denial of Service (D

    HighCVSS 7.5No exploitEPSS 1%

    webassembly · webassembly binary toolkitMay 22, 2023

  • CVE-2022-43282
    28Monitor

    wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallIndirectExpr->GetReturnCallDropKeepCount.

    HighCVSS 7.1No exploitEPSS 0%

    webassembly · wabtOct 28, 2022

  • CVE-2022-43280
    28Monitor

    wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallExpr->GetReturnCallDropKeepCount.

    HighCVSS 7.1No exploitEPSS 0%

    webassembly · wabtOct 28, 2022

  • CVE-2019-7662
    26Monitor

    An assertion failure was discovered in wasm::WasmBinaryBuilder::getType() in wasm-binary.cpp in Binaryen 1.38.22.

    MediumCVSS 6.5No exploitEPSS 2%

    webassembly · binaryenFeb 9, 2019

  • CVE-2019-7703
    26Monitor

    In Binaryen 1.38.22, there is a use-after-free problem in wasm::WasmBinaryBuilder::visitCall in wasm-binary.cpp.

    MediumCVSS 6.5No exploitEPSS 1%

    webassembly · binaryenFeb 10, 2019

  • CVE-2019-15759
    26Monitor

    An issue was discovered in Binaryen 1.38.32.

    MediumCVSS 6.5No exploitEPSS 1%

    webassembly · binaryenAug 28, 2019

  • CVE-2019-15758
    26Monitor

    An issue was discovered in Binaryen 1.38.32.

    MediumCVSS 6.5No exploitEPSS 1%

    webassembly · binaryenAug 28, 2019

  • CVE-2019-7153
    26Monitor

    A NULL pointer dereference was discovered in wasm::WasmBinaryBuilder::processFunctions() in wasm/wasm-binary.cpp (when calling wasm::WasmBin

    MediumCVSS 6.5No exploitEPSS 1%

    webassembly · binaryenJan 28, 2019

  • CVE-2019-7704
    26Monitor

    wasm::WasmBinaryBuilder::readUserSection in wasm-binary.cpp in Binaryen 1.38.22 triggers an attempt at excessive memory allocation, as demon

    MediumCVSS 6.5No exploitEPSS 1%

    webassembly · binaryenFeb 10, 2019

  • CVE-2019-7151
    26Monitor

    A NULL pointer dereference was discovered in wasm::Module::getFunctionOrNull in wasm/wasm.cpp in Binaryen 1.38.22.

    MediumCVSS 6.5No exploitEPSS 1%

    webassembly · binaryenJan 28, 2019

  • CVE-2019-7700
    26Monitor

    A heap-based buffer over-read was discovered in wasm::WasmBinaryBuilder::visitCall in wasm-binary.cpp in Binaryen 1.38.22.

    MediumCVSS 6.5No exploitEPSS 1%

    webassembly · binaryenFeb 10, 2019

  • CVE-2019-7152
    26Monitor

    A heap-based buffer over-read was discovered in wasm::WasmBinaryBuilder::processFunctions() in wasm/wasm-binary.cpp (when calling wasm::Wasm

    MediumCVSS 6.5No exploitEPSS 1%

    webassembly · binaryenJan 28, 2019

  • CVE-2019-7701
    26Monitor

    A heap-based buffer over-read was discovered in wasm::SExpressionParser::skipWhitespace() in wasm-s-parser.cpp in Binaryen 1.38.22.

    MediumCVSS 6.5No exploitEPSS 1%

    webassembly · binaryenFeb 10, 2019

  • CVE-2019-7702
    26Monitor

    A NULL pointer dereference was discovered in wasm::SExpressionWasmBuilder::parseExpression in wasm-s-parser.cpp in Binaryen 1.38.22.

    MediumCVSS 6.5No exploitEPSS 1%

    webassembly · binaryenFeb 10, 2019

  • CVE-2019-7154
    26Monitor

    The main function in tools/wasm2js.cpp in Binaryen 1.38.22 has a heap-based buffer overflow because Emscripten is misused, triggering an err

    MediumCVSS 6.5No exploitEPSS 1%

    webassembly · binaryenJan 28, 2019

  • CVE-2020-18382
    26Monitor

    Heap-buffer-overflow in /src/wasm/wasm-binary.cpp in wasm::WasmBinaryBuilder::visitBlock(wasm::Block*) in Binaryen 1.38.26.

    MediumCVSS 6.5No exploitEPSS 1%

    webassembly · binaryenAug 22, 2023

  • CVE-2020-18378
    26Monitor

    A NULL pointer dereference was discovered in SExpressionWasmBuilder::makeBlock in wasm/wasm-s-parser.c in Binaryen 1.38.26.

    MediumCVSS 6.5No exploitEPSS 1%

    webassembly · binaryenAug 22, 2023

  • CVE-2021-45293
    22Monitor

    A Denial of Service vulnerability exists in Binaryen 103 due to an Invalid memory address dereference in wasm::WasmBinaryBuilder::visitLet.

    MediumCVSS 5.5No exploitEPSS 1%

    webassembly · binaryenDec 21, 2021

  • CVE-2021-46052
    22Monitor

    A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::Tuple::validate.

    MediumCVSS 5.5No exploitEPSS 1%

    webassembly · binaryenJan 10, 2022

  • CVE-2021-46053
    22Monitor

    A Denial of Service vulnerability exists in Binaryen 103.

    MediumCVSS 5.5No exploitEPSS 1%

    webassembly · binaryenJan 10, 2022

  • CVE-2021-46054
    22Monitor

    A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::WasmBinaryBuilder::visitRethrow(wasm::Rethrow*).

    MediumCVSS 5.5No exploitEPSS 1%

    webassembly · binaryenJan 10, 2022

  • CVE-2021-46048
    22Monitor

    A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::WasmBinaryBuilder::readFunctions.

    MediumCVSS 5.5No exploitEPSS 1%

    webassembly · binaryenJan 10, 2022