CVE-2018-16765: Buffer Overflow

Q: What is the severity of CVE-2018-16765?

CVE-2018-16765 has a high severity level due to its potential for causing denial of service and application crashes.

Q: How do I fix CVE-2018-16765?

To fix CVE-2018-16765, update the WebAssembly Virtual Machine to a version released after 2018-07-26.

Q: What is the impact of CVE-2018-16765?

The impact of CVE-2018-16765 includes possible application crashes and an unspecified number of other effects due to a heap-buffer overflow.

Q: Is CVE-2018-16765 a remote vulnerability?

Yes, CVE-2018-16765 can be exploited remotely through crafted files sent to the WebAssembly Virtual Machine.

Q: Which versions of WebAssembly Virtual Machine are affected by CVE-2018-16765?

All versions of WebAssembly Virtual Machine up to and including 2018-07-26 are affected by CVE-2018-16765.

Published Sep 10, 2018

Updated

In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because of an unspecified "heap-buffer-overflow" condition in FunctionValidationContext::else.

Affected Software

1 affected component

Webassembly Virtual Machine Project Webassembly Virtual Machine<=2018-07-26

Remediation

Patch Available

https://github.com/AndrewScheidecker/WAVM/issues/94

Event History

Sep 10, 2018

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2018-16765?

CVE-2018-16765 has a high severity level due to its potential for causing denial of service and application crashes.

How do I fix CVE-2018-16765?

To fix CVE-2018-16765, update the WebAssembly Virtual Machine to a version released after 2018-07-26.

What is the impact of CVE-2018-16765?