CVE-2019-7702

Name of the Vulnerable Software and Affected Versions Binaryen version 1.38.22

Description A NULL pointer dereference issue was found in the wasm::SExpressionWasmBuilder::parseExpression function in wasm-s-parser.cpp. This can be triggered by a crafted wasm input, resulting in a segmentation fault and leading to a denial-of-service condition.

Recommendations For Binaryen version 1.38.22, as a temporary workaround, consider restricting the use of the wasm::SExpressionWasmBuilder::parseExpression function until a patch is available. Avoid using crafted wasm inputs that can cause a segmentation fault. At the moment, there is no information about a newer version that contains a fix for this vulnerability.