CVE-2018-16767: Buffer Overflow

Q: What is the severity of CVE-2018-16767?

CVE-2018-16767 has a severity rating that indicates it can cause a denial of service due to an application crash.

Q: How do I fix CVE-2018-16767?

To fix CVE-2018-16767, update the WebAssembly Virtual Machine to a version released after July 26, 2018.

Q: What type of vulnerability is CVE-2018-16767?

CVE-2018-16767 is classified as a heap buffer overflow vulnerability.

Q: Which versions of WebAssembly Virtual Machine are affected by CVE-2018-16767?

WebAssembly Virtual Machine versions up to and including 2018-07-26 are affected by CVE-2018-16767.

Q: What could be the potential impact of CVE-2018-16767?

The potential impact of CVE-2018-16767 includes application crashes and possibly other unspecified issues.

Published Sep 10, 2018

Updated

In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because of an unspecified "heap-buffer-overflow" condition in FunctionValidationContext::popAndValidateOperand.

Affected Software

1 affected component

Webassembly Virtual Machine Project Webassembly Virtual Machine<=2018-07-26

Remediation

Patch Available

https://github.com/AndrewScheidecker/WAVM/issues/97

Event History

Sep 10, 2018

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2018-16767?

CVE-2018-16767 has a severity rating that indicates it can cause a denial of service due to an application crash.

How do I fix CVE-2018-16767?

To fix CVE-2018-16767, update the WebAssembly Virtual Machine to a version released after July 26, 2018.

What type of vulnerability is CVE-2018-16767?