CVE-2020-18378

Name of the Vulnerable Software and Affected Versions Binaryen version 1.38.26

Description A NULL pointer dereference was discovered in SExpressionWasmBuilder::makeBlock in wasm/wasm-s-parser.c. A crafted wasm input can cause a segmentation fault, leading to denial-of-service.

Recommendations For Binaryen version 1.38.26, consider updating to a newer version that contains a fix for this issue, as the current version is affected by the NULL pointer dereference in SExpressionWasmBuilder::makeBlock. At the moment, there is no information about a newer version that contains a fix for this vulnerability.