Webassembly Virtual Machine

webassembly_virtual_machine

Vendor: Webassembly Virtual Machine Project • 9 CVEs

CVEs (9)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2018-17293 1Webassembly Virtual Machine Project 1Webassembly Virtual Machine Nov 21, 2024 Sep 21, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 An issue was discovered in WAVM before 2018-09-16. The run function in Programs/wavm/wavm.cpp does not check whether there is Emscripten memory to store the command-line arguments passed by the input WebAssembly file's m...Show more An issue was discovered in WAVM before 2018-09-16. The run function in Programs/wavm/wavm.cpp does not check whether there is Emscripten memory to store the command-line arguments passed by the input WebAssembly file's main function, which allows attackers to cause a denial of service (application crash by NULL pointer dereference) or possibly have unspecified other impact by crafting certain WebAssembly files.Show less
CVE-2018-17292 1Webassembly Virtual Machine Project 1Webassembly Virtual Machine Nov 21, 2024 Sep 21, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in WAVM before 2018-09-16. The loadModule function in Include/Inline/CLI.h lacks checking of the file length before a file magic comparison, allowing attackers to cause a Denial of Service (applic...Show more An issue was discovered in WAVM before 2018-09-16. The loadModule function in Include/Inline/CLI.h lacks checking of the file length before a file magic comparison, allowing attackers to cause a Denial of Service (application crash caused by out-of-bounds read) by crafting a file that has fewer than 4 bytes.Show less
CVE-2018-16770 1Webassembly Virtual Machine Project 1Webassembly Virtual Machine Nov 21, 2024 Sep 10, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because a certain new_allocator allocate call...Show more In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because a certain new_allocator allocate call fails.Show less
CVE-2018-16769 1Webassembly Virtual Machine Project 1Webassembly Virtual Machine Nov 21, 2024 Sep 10, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because libRuntime.so!llvm::InstructionCombin...Show more In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because libRuntime.so!llvm::InstructionCombiningPass::runOnFunction is mishandled.Show less
CVE-2018-16768 1Webassembly Virtual Machine Project 1Webassembly Virtual Machine Nov 21, 2024 Sep 10, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because of an unspecified "heap-buffer-overfl...Show more In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because of an unspecified "heap-buffer-overflow" condition in IR::FunctionValidationContext::end.Show less
CVE-2018-16767 1Webassembly Virtual Machine Project 1Webassembly Virtual Machine Nov 21, 2024 Sep 10, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because of an unspecified "heap-buffer-overfl...Show more In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because of an unspecified "heap-buffer-overflow" condition in FunctionValidationContext::popAndValidateOperand.Show less
CVE-2018-16766 1Webassembly Virtual Machine Project 1Webassembly Virtual Machine Nov 21, 2024 Sep 10, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because Errors::unreachable() is reached.
CVE-2018-16765 1Webassembly Virtual Machine Project 1Webassembly Virtual Machine Nov 21, 2024 Sep 10, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because of an unspecified "heap-buffer-overfl...Show more In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because of an unspecified "heap-buffer-overflow" condition in FunctionValidationContext::else_.Show less
CVE-2018-16764 1Webassembly Virtual Machine Project 1Webassembly Virtual Machine Nov 21, 2024 Sep 10, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because of an IR::FunctionValidationContext::...Show more In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because of an IR::FunctionValidationContext::catch_all heap-based buffer over-read.Show less