CVE-2019-15759

    Dashboard / Vulnerabilities / CVE-2019-15759

    CVE-2019-15759

    Published: 29 Aug 2019Last Modified: 8 Jul 2026

    Summary:

    Details: An issue was discovered in Binaryen 1.38.32. Two visitors in ir/ExpressionManipulator.cpp can lead to a NULL pointer dereference in wasm::LocalSet::finalize in wasm/wasm.cpp. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by wasm2js.

    References: https://github.com/WebAssembly/binaryen/issues/2288, https://github.com/WebAssembly/binaryen/pull/2289

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f

    Affected versions

    version_88

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High