CVE-2019-7154: Buffer Overflow
Published Jan 29, 2019
·Updated
The main function in tools/wasm2js.cpp in Binaryen 1.38.22 has a heap-based buffer overflow because Emscripten is misused, triggering an error in cashew::JSPrinter::printAst() in emscripten-optimizer/simpleast.h. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by wasm2js.
Affected Software
1 affected component
Webassembly Binaryen<65
Remediation
Patch Available
Event History
Jan 29, 2019
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·12:29 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2019-7154.
2
What is the severity of CVE-2019-7154?
The severity of CVE-2019-7154 is medium, with a severity value of 6.5.
3
Which software is affected by CVE-2019-7154?
The software affected by CVE-2019-7154 is Webassembly Binaryen up to version 65.
4
What is the CWE ID for CVE-2019-7154?
The CWE ID for CVE-2019-7154 is CWE-119 and CWE-787.
5
How can this vulnerability be exploited?
This vulnerability can be exploited by using a crafted input to cause segmentation faults, leading to denial-of-service.