CVE-2019-7702: Null Pointer Dereference
A NULL pointer dereference was discovered in wasm::SExpressionWasmBuilder::parseExpression in wasm-s-parser.cpp in Binaryen 1.38.22. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm-as.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-7702?
CVE-2019-7702 is a vulnerability that allows a NULL pointer dereference in wasm::SExpressionWasmBuilder::parseExpression in wasm-s-parser.cpp in Binaryen 1.38.22, leading to denial-of-service.
What is the severity of CVE-2019-7702?
The severity of CVE-2019-7702 is medium with a CVSS score of 6.5.
How does CVE-2019-7702 affect Webassembly Binaryen?
CVE-2019-7702 affects Webassembly Binaryen versions up to (excluding) version 1.38.22.
How can CVE-2019-7702 be exploited?
CVE-2019-7702 can be exploited by crafting a wasm input that causes a segmentation fault, leading to denial-of-service.
Is there a fix for CVE-2019-7702?
To fix CVE-2019-7702, users should update to a version of Webassembly Binaryen that is higher than version 1.38.22.