The main function in tools/wasm2js.cpp in Binaryen 1.38.22 has a heap-based buffer overflow because Emscripten is misused, triggering an error in cashew::JSPrinter::printAst() in emscripten-optimizer/simple_ast.h. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by wasm2js.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2019-01-29T00:00:00

Updated: 2024-08-04T20:38:33.440Z

Reserved: 2019-01-28T00:00:00

Link: CVE-2019-7154

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2019-01-29T00:29:00.627

Modified: 2024-11-21T04:47:40.690

Link: CVE-2019-7154

cve-icon Redhat

No data.