CVE-2019-7153: Null Pointer Dereference
A NULL pointer dereference was discovered in wasm::WasmBinaryBuilder::processFunctions() in wasm/wasm-binary.cpp (when calling wasm::WasmBinaryBuilder::getFunctionIndexName) in Binaryen 1.38.22. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by wasm-opt.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2019-7153?
The severity of CVE-2019-7153 is medium with a severity value of 6.5.
What is the affected software for CVE-2019-7153?
The affected software for CVE-2019-7153 is Webassembly Binaryen version up to exclusive 65.
What is the vulnerability description of CVE-2019-7153?
CVE-2019-7153 is a NULL pointer dereference vulnerability in wasm::WasmBinaryBuilder::processFunctions() in wasm/wasm-binary.cpp, allowing crafted input to cause segmentation faults and denial-of-service.
How can I exploit CVE-2019-7153?
To exploit CVE-2019-7153, a crafted input can be used to cause segmentation faults, leading to denial-of-service.
Is there a fix available for CVE-2019-7153?
It is recommended to update to a version of Webassembly Binaryen beyond 1.38.22 to mitigate the vulnerability in CVE-2019-7153.