CVE-2018-16768

HIGH

WebAssembly Virtual Machine < 2018-07-26 - Heap Buffer Overflow in IR::FunctionValidationContext::end

Title source: llm

Description

In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because of an unspecified "heap-buffer-overflow" condition in IR::FunctionValidationContext::end.

References (1)

Core 1

Core References

Exploit, Issue Tracking, Patch, Third Party Advisory x_refsource_misc

https://github.com/AndrewScheidecker/WAVM/issues/98

Scores

CVSS v3 8.8

EPSS 0.0127

EPSS Percentile 66.1%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-119

Status published

Products (1)

webassembly_virtual_machine_project/webassembly_virtual_machine < 2018-07-26

Published Sep 10, 2018

Tracked Since Feb 18, 2026