CVE-2020-18382

Name of the Vulnerable Software and Affected Versions Binaryen version 1.38.26

Description A heap-buffer-overflow issue exists in the wasm::WasmBinaryBuilder::visitBlock(wasm::Block*) function in src/wasm/wasm-binary.cpp. This can be triggered by a crafted wasm input, leading to a segmentation fault and resulting in denial-of-service. The issue is demonstrated by wasm-opt.

Recommendations For Binaryen version 1.38.26, consider updating to a newer version that contains a fix for this issue, as the current version is affected by the heap-buffer-overflow in wasm::WasmBinaryBuilder::visitBlock(wasm::Block*). At the moment, there is no information about a newer version that contains a fix for this vulnerability.