CVE-2018-16766

HIGH

WebAssembly Virtual Machine < 2018-07-26 - Denial of Service via Crafted File

Title source: llm

Description

In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because Errors::unreachable() is reached.

References (1)

Core 1

Core References

Exploit, Issue Tracking, Patch, Third Party Advisory x_refsource_misc

https://github.com/AndrewScheidecker/WAVM/issues/96

Scores

CVSS v3 8.8

EPSS 0.0127

EPSS Percentile 65.9%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-670

Status published

Products (1)

webassembly_virtual_machine_project/webassembly_virtual_machine < 2018-07-26

Published Sep 10, 2018

Tracked Since Feb 18, 2026