CVE-2019-7700

Name of the Vulnerable Software and Affected Versions Binaryen version 1.38.22

Description A heap-based buffer over-read issue was found in the wasm::WasmBinaryBuilder::visitCall function in wasm-binary.cpp. This can be triggered by a crafted wasm input, potentially causing a segmentation fault and leading to denial-of-service.

Recommendations For Binaryen version 1.38.22, as a temporary workaround, consider restricting the use of the wasm::WasmBinaryBuilder::visitCall function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.