CVE-2026-8257

Name of the Vulnerable Software and Affected Versions WebAssembly Binaryen versions prior to 118

Description An issue exists in the BrOn Parser component within the IRBuilder::makeBrOn() function of the src/wasm/wasm-ir-builder.cpp file. A specific manipulation can lead to a reachable assertion, which is a condition where the program reaches a state that the developers assumed was impossible, typically causing the application to crash. This requires local access to be exploited.

Recommendations Install the patch 1251efbc1ea471c1311d2726b2bbe061ff2a291c to resolve this issue.