CVE-2019-15759

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2019-15759

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-15759.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2019-15759

Downstream

DEBIAN-CVE-2019-15759

Published

2019-08-29T02:15:10.617Z

Modified

2026-05-18T05:52:01.555969184Z

Severity

6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator

Summary

[none]

Details

An issue was discovered in Binaryen 1.38.32. Two visitors in ir/ExpressionManipulator.cpp can lead to a NULL pointer dereference in wasm::LocalSet::finalize in wasm/wasm.cpp. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by wasm2js.

References

Affected packages

Git / github.com/webassembly/binaryen

Affected ranges

Type

GIT

Repo

https://github.com/webassembly/binaryen

Events

Introduced

Fixed

e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f

Database specific

{
    "cpe": "cpe:2.3:a:webassembly:binaryen:*:*:*:*:*:*:*:*",
    "source": "CPE_FIELD",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "89"
        }
    ]
}

Affected versions

1.*

1.36.10

1.36.11

1.36.12

1.36.13

1.36.14

1.36.2

1.36.3

1.36.4

1.36.5

1.36.6

1.36.7

1.36.8

1.36.9

1.37.0

1.37.1

1.37.10

1.37.11

1.37.12

1.37.13

1.37.14

1.37.15

1.37.16

1.37.17

1.37.18

1.37.19

1.37.2

1.37.20

1.37.21

1.37.22

1.37.23

1.37.24

1.37.25

1.37.26

1.37.27

1.37.28

1.37.29

1.37.3

1.37.30

1.37.31

1.37.32

1.37.33

1.37.34

1.37.35

1.37.36

1.37.37

1.37.39

1.37.4

1.37.40

1.37.5

1.37.6

1.37.7

1.37.8

1.37.9

1.38.0

1.38.1

1.38.10

1.38.11

1.38.12

1.38.13

1.38.14

1.38.15

1.38.16

1.38.17

1.38.18

1.38.19

1.38.2

1.38.20

1.38.21

1.38.22

1.38.23

1.38.24

1.38.25

1.38.26

1.38.27

1.38.28

1.38.29

1.38.3

1.38.30

1.38.31

1.38.32

1.38.4

1.38.5

1.38.6

1.38.7

1.38.8

1.38.9

Other

binary_0xb

version_1

version_10

version_11

version_12

version_13

version_14

version_15

version_16

version_17

version_18

version_19

version_2

version_20

version_21

version_22

version_23

version_24

version_25

version_26

version_27

version_28

version_29

version_3

version_30

version_31

version_32

version_33

version_34

version_35

version_36

version_37

version_38

version_39

version_4

version_40

version_41

version_42

version_43

version_44

version_45

version_46

version_47

version_48

version_49

version_5

version_50

version_51

version_52

version_53

version_54

version_55

version_56

version_57

version_58

version_59

version_6

version_60

version_61

version_62

version_63

version_64

version_65

version_66

version_67

version_68

version_69

version_7

version_70

version_71

version_72

version_73

version_74

version_75

version_76

version_77

version_78

version_79

version_8

version_80

version_81

version_82

version_83

version_84

version_85

version_86

version_87

version_88

version_9

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-15759.json"