Approved changes feed: RSS · Atom
cpe:2.3:a:webassembly:binaryen:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Webassembly (b9c28f57-7e0a-59a3-be75-665c271336b8) |
|---|---|
| Product | Binaryen (bf805c82-4c79-5c2d-b451-f805ce102c87) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/binaryen |
purl2cpe | 2026-06-01 10:16:59.339832 |
pkg:deb/ubuntu/binaryen |
purl2cpe | 2026-06-01 10:16:59.339834 |
pkg:github/webassembly/binaryen |
purl2cpe | 2026-06-01 10:16:59.339836 |
pkg:rpm/fedora/binaryen |
purl2cpe | 2026-06-01 10:16:59.339838 |
pkg:rpm/opensuse/binaryen |
purl2cpe | 2026-06-01 10:16:59.339839 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-8257 |
vulnerable | 2026-06-08 08:08:58.243103 |
WebAssembly Binaryen BrOn wasm-ir-builder.cpp makeBrOn assertion
LOW (3.3)
A vulnerability was detected in WebAssembly Binaryen up to 117. This issue affects the function IRBuilder::makeBrOn of the file src/wasm/wasm-ir-builder.cpp of the component BrOn Parser. Performing a manipulation results in reachable assertion. The attack needs to be approached locally. The exploit is now public and may be used. The patch is named 1251efbc1ea471c1311d2726b2bbe061ff2a291c. It is suggested to install a patch to address this issue.
Published: 2026-05-11T00:30:13.661Z
Updated: 2026-05-11T17:31:23.327Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14957 |
vulnerable | 2026-06-08 07:06:35.420697 |
WebAssembly Binaryen IRBuilder wasm-ir-builder.cpp makeLocalTee null pointer dereference
LOW (3.3)
A vulnerability was identified in WebAssembly Binaryen up to 125. This affects the function IRBuilder::makeLocalGet/IRBuilder::makeLocalSet/IRBuilder::makeLocalTee of the file src/wasm/wasm-ir-builder.cpp of the component IRBuilder. Such manipulation of the argument Index leads to null pointer dereference. Local access is required to approach this attack. The exploit is publicly available and might be used. The name of the patch is 6fb2b917a79578ab44cf3b900a6da4c27251e0d4. Applying a patch is advised to resolve this issue.
Published: 2025-12-19T17:02:16.843Z
Updated: 2026-02-24T05:57:44.642Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14956 |
vulnerable | 2026-06-08 07:06:35.420258 |
WebAssembly Binaryen wasm-binary.cpp readExport heap-based overflow
MEDIUM (5.3)
A vulnerability was determined in WebAssembly Binaryen up to 125. Affected by this issue is the function WasmBinaryReader::readExport of the file src/wasm/wasm-binary.cpp. This manipulation causes heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been publicly disclosed and may be utilized. Patch name: 4f52bff8c4075b5630422f902dd92a0af2c9f398. It is recommended to apply a patch to fix this issue.
Published: 2025-12-19T16:32:12.536Z
Updated: 2026-02-24T05:57:29.961Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7704 |
vulnerable | 2026-06-08 05:14:14.668831 |
Details available
wasm::WasmBinaryBuilder::readUserSection in wasm-binary.cpp in Binaryen 1.38.22 triggers an attempt at excessive memory allocation, as demonstrated by wasm-merge and wasm-opt.
Published: 2019-02-10T22:00:00.000Z
Updated: 2024-08-04T20:54:28.471Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7703 |
vulnerable | 2026-06-08 05:14:14.668474 |
Details available
In Binaryen 1.38.22, there is a use-after-free problem in wasm::WasmBinaryBuilder::visitCall in wasm-binary.cpp. Remote attackers could leverage this vulnerability to cause a denial-of-service via a wasm file, as demonstrated by wasm-merge.
Published: 2019-02-10T22:00:00.000Z
Updated: 2024-08-04T20:54:28.245Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7702 |
vulnerable | 2026-06-08 05:14:14.668216 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7701 |
vulnerable | 2026-06-08 05:14:14.667937 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7700 |
vulnerable | 2026-06-08 05:14:14.667649 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7662 |
vulnerable | 2026-06-08 05:14:14.640096 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7154 |
vulnerable | 2026-06-08 05:14:13.915949 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7153 |
vulnerable | 2026-06-08 05:14:13.915657 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7152 |
vulnerable | 2026-06-08 05:14:13.915327 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7151 |
vulnerable | 2026-06-08 05:14:13.914799 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-15759 |
vulnerable | 2026-06-08 05:12:57.927012 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-15758 |
vulnerable | 2026-06-08 05:12:57.926616 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.