NULL Pointer Dereference in Binaryen Affects WebAssembly Functionality

CVE-2019-7151

What is CVE-2019-7151?

A NULL pointer dereference vulnerability was identified in the wasm::Module::getFunctionOrNull function within Binaryen 1.38.22. This flaw allows an attacker to craft specific inputs that result in segmentation faults, ultimately leading to a denial-of-service condition. It highlights a significant risk where malicious inputs can disrupt the normal operations of applications utilizing Binaryen.

References