CVE-2018-17293 - CVE House
Back to Database
Status published High CVE-2018-17293

An issue was discovered in WAVM before 2018-09-16. The run...

Vulnerability Description

An issue was discovered in WAVM before 2018-09-16. The run function in Programs/wavm/wavm.cpp does not check whether there is Emscripten memory to store the command-line arguments passed by the input WebAssembly file's main function, which allows attackers to cause a denial of service (application crash by NULL pointer dereference) or possibly have unspecified other impact by crafting certain WebAssembly files.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-17293

Credits & Attribution

No credits recorded in the NVD database.

References

More from webassembly virtual machine project

View All →
CVE-2018-17292
An issue was discovered in WAVM before 2018-09-16. The loadModule...
Medium 6.5
CVE-2018-16770
In WAVM through 2018-07-26, a crafted file sent to the...
High 8.8
CVE-2018-16769
In WAVM through 2018-07-26, a crafted file sent to the...
High 8.8
CVE-2018-16768
In WAVM through 2018-07-26, a crafted file sent to the...
High 8.8
CVE-2018-16767
In WAVM through 2018-07-26, a crafted file sent to the...
High 8.8

Affected Vendor

webassembly virtual machine project

View all reports →

Affected Software

webassembly virtual machine
Vulnerable Versions:
0

Timeline

Official Publish: September 21st, 2018
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.