Wcventure

**Name of the Vulnerable Software and Affected Versions** Binaryen version 1.38.26 **Description** A heap-buffer-overflow issue exists in the `wasm::WasmBinaryBuilder::visitBlock(wasm::Block*)` function in `src/wasm/wasm-binary.cpp`. This can be triggered by a crafted wasm input, leading to a segmentation fault and resulting in denial-of-service. The issue is demonstrated by `wasm-opt`. **Recommendations** For Binaryen version 1.38.26, consider updating to a newer version that contains a fix for this issue, as the current version is affected by the heap-buffer-overflow in `wasm::WasmBinaryBuilder::visitBlock(wasm::Block*)`. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Binaryen version 1.38.26 **Description** A NULL pointer dereference was discovered in `SExpressionWasmBuilder::makeBlock` in `wasm/wasm-s-parser.c`. A crafted wasm input can cause a segmentation fault, leading to denial-of-service. **Recommendations** For Binaryen version 1.38.26, consider updating to a newer version that contains a fix for this issue, as the current version is affected by the NULL pointer dereference in `SExpressionWasmBuilder::makeBlock`. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** lrzip version 0.641 **Description** The issue is related to a multiple concurrency use-after-free between the functions `zpaq decompress buf()` and `clear rulist()`. This allows attackers to cause a Denial of Service (DoS) via a crafted Irz file. The vulnerability is associated with parallel memory usage after release. **Recommendations** For lrzip version 0.641, consider disabling the `zpaq decompress buf()` and `clear rulist()` functions as a temporary workaround to minimize the risk of exploitation. Avoid using crafted Irz files until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: libexe versions prior to 20181128 Description: A heap-based buffer overflow in the `libexe io handle read coff optional header` function allows attackers to execute arbitrary code. Recommendations: For versions prior to 20181128, update to a version 20181128 or later to resolve the issue. As a temporary workaround, consider restricting the use of the `libexe io handle read coff optional header` function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Exiv2 version 0.27 **Description** The issue is related to an uncontrolled memory allocation in the `DataBufdata(subBox.length-sizeof(box))` function of the Exiv2 library, which can be exploited by a remote attacker to cause a denial of service (DOS) via a crafted input. **Recommendations** For Exiv2 version 0.27, consider disabling the `DataBufdata(subBox.length-sizeof(box))` function as a temporary workaround until a patch is available. Restrict access to the Exiv2 library to minimize the risk of exploitation. Avoid using crafted inputs that could trigger the uncontrolled memory allocation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Cesanta MJS version 1.20.1 Description: The issue is a stack overflow vulnerability in the `parse statement` function, which allows remote attackers to cause a Denial of Service (DoS) via a crafted file. Recommendations: For Cesanta MJS version 1.20.1, as a temporary workaround, consider disabling the `parse statement` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Cesanta MJS version 1.20.1 Description: The issue is a stack overflow vulnerability in the `parse statement list` function, which allows remote attackers to cause a Denial of Service (DoS) via a crafted file. Recommendations: For Cesanta MJS version 1.20.1, as a temporary workaround, consider disabling the `parse statement list` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Gama version 2.04 Description: A NULL-pointer deference issue was discovered in the `GNU gama::set()` function in `ellipsoid.h`, which can lead to a denial of service (DOS) via segment faults caused by crafted inputs. Recommendations: For Gama version 2.04, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Cesanta MJS version 1.20.1 Description: The issue is a stack overflow vulnerability in the `parse block` function, which allows remote attackers to cause a Denial of Service (DoS) via a crafted file. Recommendations: For Cesanta MJS version 1.20.1, as a temporary workaround, consider disabling the `parse block` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** GNU cflow versions prior to 1.7 **Description** The issue is related to a use-after-free in the reference function in parser.c. **Recommendations** For GNU cflow versions prior to 1.7, update to version 1.7 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** GNU cflow versions prior to 1.7 **Description** The issue is related to a heap-based buffer over-read in the `nexttoken` function in `parser.c`. **Recommendations** For GNU cflow versions prior to 1.7, update to version 1.7 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Binaryen version 1.38.22 **Description** A heap-based buffer over-read issue was found in the `wasm::SExpressionParser::skipWhitespace()` function in `wasm-s-parser.cpp`. This can be triggered by a crafted wasm input, potentially causing a segmentation fault and leading to denial-of-service. **Recommendations** For Binaryen version 1.38.22, consider avoiding the use of crafted wasm inputs that may trigger the `wasm::SExpressionParser::skipWhitespace()` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Bento4 version 1.5.1-627 **Description** An issue was discovered in the AP4 Array function, which can be triggered by crafted MP4 input, leading to an attempt at excessive memory allocation. This issue is related to a previously known problem. **Recommendations** For Bento4 version 1.5.1-627, consider updating to a newer version that addresses this issue, as the current version may be prone to excessive memory allocation attempts when processing crafted MP4 input. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Binaryen version 1.38.22 **Description** A heap-based buffer over-read issue was found in the `wasm::WasmBinaryBuilder::visitCall` function in `wasm-binary.cpp`. This can be triggered by a crafted wasm input, potentially causing a segmentation fault and leading to denial-of-service. **Recommendations** For Binaryen version 1.38.22, as a temporary workaround, consider restricting the use of the `wasm::WasmBinaryBuilder::visitCall` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Binaryen version 1.38.22 **Description** The issue is a use-after-free problem in the `wasm::WasmBinaryBuilder::visitCall` function, located in `wasm-binary.cpp`. This could allow remote attackers to cause a denial-of-service via a wasm file. **Recommendations** For Binaryen version 1.38.22, update to a newer version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Bento4 version 1.5.1-627 **Description** An issue in Bento4 leads to an assertion failure in `AP4 AtomListWriter::Action` in `Core/Ap4Atom.cpp`, resulting in a denial of service where the program crashes. This issue can be demonstrated using `mp42hls`. **Recommendations** For Bento4 version 1.5.1-627, consider applying a patch or fix to resolve the assertion failure issue in `AP4 AtomListWriter::Action` to prevent program crashes. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Binaryen version 1.38.22 **Description** The issue is related to excessive memory allocation in the `wasm::WasmBinaryBuilder::readUserSection` function in `wasm-binary.cpp`. This can be triggered by tools such as `wasm-merge` and `wasm-opt`. **Recommendations** For Binaryen version 1.38.22, consider applying a patch or fix that limits memory allocation in the `wasm::WasmBinaryBuilder::readUserSection` function to prevent excessive memory usage. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Binaryen version 1.38.22 **Description** A NULL pointer dereference issue was found in the `wasm::SExpressionWasmBuilder::parseExpression` function in `wasm-s-parser.cpp`. This can be triggered by a crafted wasm input, resulting in a segmentation fault and leading to a denial-of-service condition. **Recommendations** For Binaryen version 1.38.22, as a temporary workaround, consider restricting the use of the `wasm::SExpressionWasmBuilder::parseExpression` function until a patch is available. Avoid using crafted wasm inputs that can cause a segmentation fault. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Bento4 version 1.5.1-627 **Description** A heap-based buffer over-read issue occurs in the `AP4 BitStream::WriteBytes` function in `Codecs/Ap4BitStream.cpp`, allowing remote attackers to cause an exception via crafted mp4 input. This leads to a denial of service. **Recommendations** For Bento4 version 1.5.1-627, consider updating to a newer version that contains a fix for this issue, as no specific mitigation measures are provided for this version. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Binaryen version 1.38.22 **Description** An assertion failure was discovered in the `getType()` function in `wasm-binary.cpp`, which allows remote attackers to cause a denial of service via a crafted wasm file. This results in a failed assertion and crash. **Recommendations** For Binaryen version 1.38.22, at the moment, there is no information about a newer version that contains a fix for this vulnerability.