CVE-2019-7704

Name of the Vulnerable Software and Affected Versions Binaryen version 1.38.22

Description The issue is related to excessive memory allocation in the wasm::WasmBinaryBuilder::readUserSection function in wasm-binary.cpp. This can be triggered by tools such as wasm-merge and wasm-opt.

Recommendations For Binaryen version 1.38.22, consider applying a patch or fix that limits memory allocation in the wasm::WasmBinaryBuilder::readUserSection function to prevent excessive memory usage. At the moment, there is no information about a newer version that contains a fix for this vulnerability.