CVE-2019-7701

Name of the Vulnerable Software and Affected Versions Binaryen version 1.38.22

Description A heap-based buffer over-read issue was found in the wasm::SExpressionParser::skipWhitespace() function in wasm-s-parser.cpp. This can be triggered by a crafted wasm input, potentially causing a segmentation fault and leading to denial-of-service.

Recommendations For Binaryen version 1.38.22, consider avoiding the use of crafted wasm inputs that may trigger the wasm::SExpressionParser::skipWhitespace() function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.