Binaryen

Every one of the 25 is a mark on the map. Named now: 1 to 25, most at risk first.

1. An assertion failure was discovered in wasm::WasmBinaryBuilder::getType() in wasm-binary.cpp in Binaryen 1.38.22. This allows remote attackers to cause a denial of service (failed…CVE-2019-7662Webassembly · 1.6% likely

   CWE-617

2. A Denial of Service vulnerability exits in Binaryen 103 due to an assertion abort in wasm::handle_unreachable.CVE-2021-45290Webassembly · 1.5% likely

   CWE-617

3. In Binaryen 1.38.22, there is a use-after-free problem in wasm::WasmBinaryBuilder::visitCall in wasm-binary.cpp. Remote attackers could leverage this vulnerability to cause a deni…CVE-2019-7703Webassembly · 1.5% likely

   CWE-416

4. An issue was discovered in Binaryen 1.38.32. Two visitors in ir/ExpressionManipulator.cpp can lead to a NULL pointer dereference in wasm::LocalSet::finalize in wasm/wasm.cpp. A cr…CVE-2019-15759Webassembly · 1.3% likely

   CWE-476

5. An issue was discovered in Binaryen 1.38.32. Missing validation rules in asmjs/asmangle.cpp can lead to an Assertion Failure at wasm/wasm.cpp in wasm::asmangle. A crafted input ca…CVE-2019-15758Webassembly · 1.2% likely

   CWE-617

6. A NULL pointer dereference was discovered in wasm::WasmBinaryBuilder::processFunctions() in wasm/wasm-binary.cpp (when calling wasm::WasmBinaryBuilder::getFunctionIndexName) in Bi…CVE-2019-7153Webassembly · 1.2% likely

   CWE-476

7. wasm::WasmBinaryBuilder::readUserSection in wasm-binary.cpp in Binaryen 1.38.22 triggers an attempt at excessive memory allocation, as demonstrated by wasm-merge and wasm-opt.CVE-2019-7704Webassembly · 1.2% likely

   CWE-770

8. A heap-based buffer over-read was discovered in wasm::SExpressionParser::skipWhitespace() in wasm-s-parser.cpp in Binaryen 1.38.22. A crafted wasm input can cause a segmentation f…CVE-2019-7701Webassembly · 1.2% likely

   CWE-125

9. A heap-based buffer over-read was discovered in wasm::WasmBinaryBuilder::visitCall in wasm-binary.cpp in Binaryen 1.38.22. A crafted wasm input can cause a segmentation fault, lea…CVE-2019-7700Webassembly · 1.2% likely

   CWE-125

10. A heap-based buffer over-read was discovered in wasm::WasmBinaryBuilder::processFunctions() in wasm/wasm-binary.cpp (when calling wasm::WasmBinaryBuilder::getFunctionIndexName) in…CVE-2019-7152Webassembly · 1.2% likely

    CWE-125

11. A NULL pointer dereference was discovered in wasm::Module::getFunctionOrNull in wasm/wasm.cpp in Binaryen 1.38.22. A crafted input can cause segmentation faults, leading to denial…CVE-2019-7151Webassembly · 1.2% likely

    CWE-476

12. A NULL pointer dereference was discovered in wasm::SExpressionWasmBuilder::parseExpression in wasm-s-parser.cpp in Binaryen 1.38.22. A crafted wasm input can cause a segmentation…CVE-2019-7702Webassembly · 1.1% likely

    CWE-476

13. The main function in tools/wasm2js.cpp in Binaryen 1.38.22 has a heap-based buffer overflow because Emscripten is misused, triggering an error in cashew::JSPrinter::printAst() in…CVE-2019-7154Webassembly · 1.1% likely

    CWE-787

14. A Denial of Service vulnerability exists in Binaryen 103 due to an Invalid memory address dereference in wasm::WasmBinaryBuilder::visitLet.CVE-2021-45293Webassembly · 0.8% likely

    CWE-119

15. A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::WasmBinaryBuilder::visitRethrow(wasm::Rethrow*).CVE-2021-46054Webassembly · 0.8% likely

    CWE-617

16. A Denial of Service vulnerability exists in Binaryen 103. The program terminates with signal SIGKILL.CVE-2021-46053Webassembly · 0.8% likely

    CWE-119

17. A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::Tuple::validate.CVE-2021-46052Webassembly · 0.8% likely

    CWE-617

18. A Stack Overflow vulnerability exists in Binaryen 103 via the printf_common function.CVE-2021-46050Webassembly · 0.8% likely

    CWE-770

19. A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::WasmBinaryBuilder::visitRethrow(wasm::Rethrow*).CVE-2021-46055Webassembly · 0.7% likely

    CWE-617

20. A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::WasmBinaryBuilder::readFunctions.CVE-2021-46048Webassembly · 0.7% likely

    CWE-617

21. Heap-buffer-overflow in /src/wasm/wasm-binary.cpp in wasm::WasmBinaryBuilder::visitBlock(wasm::Block*) in Binaryen 1.38.26. A crafted wasm input can cause a segmentation fault, le…CVE-2020-18382Webassembly · 0.6% likely

    CWE-787

22. A NULL pointer dereference was discovered in SExpressionWasmBuilder::makeBlock in wasm/wasm-s-parser.c in Binaryen 1.38.26. A crafted wasm input can cause a segmentation fault, le…CVE-2020-18378Webassembly · CVSS 6.5 · 0.6% likely

    CWE-476

23. WebAssembly Binaryen wasm-binary.cpp readExport heap-based overflowCVE-2025-14956WebAssembly · CVSS 5.3 · 0.2% likely

    CWE-122

24. WebAssembly Binaryen IRBuilder wasm-ir-builder.cpp makeLocalTee null pointer dereferenceCVE-2025-14957WebAssembly · CVSS 3.3 · 0.2% likely

    CWE-476

25. WebAssembly Binaryen BrOn wasm-ir-builder.cpp makeBrOn assertionCVE-2026-8257WebAssembly · CVSS 3.3 · 0.2% likely

    CWE-617

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.