Approved changes feed: RSS · Atom

cpe:2.3:a:webassembly:binaryen:1.38.26:*:*:*:*:*:*:*

part: a version: 1.38.26 update: *

VendorWebassembly (b9c28f57-7e0a-59a3-be75-665c271336b8)
ProductBinaryen (bf805c82-4c79-5c2d-b451-f805ce102c87)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/binaryen purl2cpe 2026-06-01 10:16:59.340595
pkg:deb/ubuntu/binaryen purl2cpe 2026-06-01 10:16:59.340596
pkg:github/webassembly/binaryen purl2cpe 2026-06-01 10:16:59.340598
pkg:rpm/fedora/binaryen purl2cpe 2026-06-01 10:16:59.340600
pkg:rpm/opensuse/binaryen purl2cpe 2026-06-01 10:16:59.340601

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-18382 vulnerable 2026-06-08 05:20:56.953862 Details available
Heap-buffer-overflow in /src/wasm/wasm-binary.cpp in wasm::WasmBinaryBuilder::visitBlock(wasm::Block*) in Binaryen 1.38.26. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm-opt.
Published: 2023-08-22T00:00:00.000Z
Updated: 2024-10-07T15:46:14.979Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-18378 vulnerable 2026-06-08 05:20:56.953463 Details available
A NULL pointer dereference was discovered in SExpressionWasmBuilder::makeBlock in wasm/wasm-s-parser.c in Binaryen 1.38.26. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm-as.
Published: 2023-08-22T00:00:00.000Z
Updated: 2024-10-03T20:30:39.248Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.