CVE-2020-18382: Medium severity webassembly binaryen vulnerability
Published Aug 22, 2023
·Updated
Heap-buffer-overflow in /src/wasm/wasm-binary.cpp in wasm::WasmBinaryBuilder::visitBlock(wasm::Block) in Binaryen 1.38.26. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm-opt.
Affected Software
1 affected component
Webassembly Binaryen=1.38.26
Event History
Aug 22, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is CVE-2020-18382?
CVE-2020-18382 is a heap-buffer-overflow vulnerability in the wasm::WasmBinaryBuilder::visitBlock function in Binaryen 1.38.26.
2
What is the severity of CVE-2020-18382?
The severity of CVE-2020-18382 is medium with a CVSS score of 6.5.
3
How can CVE-2020-18382 be exploited?
CVE-2020-18382 can be exploited by using a crafted wasm input that causes a segmentation fault, leading to denial-of-service.
4
Which software versions are affected by CVE-2020-18382?
Binaryen version 1.38.26 is affected by CVE-2020-18382.
5
How do I fix CVE-2020-18382?
To fix CVE-2020-18382, update to a version of Binaryen that is not affected by the vulnerability.