JLSEC-2026-1092 Low 1.9

A vulnerability was determined in WebAssembly Binaryen up to 125. Affected by this issue is the...

JLSEC Published: Jul 31, 2026
Modified: Jul 31, 2026
Severity: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Affected Packages: Binaryen_jll < 0.130.0+0
Upstream: CVE-2025-14956 GHSA-vjgx-vcpf-hm6w EUVD-2025-204567

A vulnerability was determined in WebAssembly Binaryen up to 125. Affected by this issue is the function WasmBinaryReader::readExport of the file src/wasm/wasm-binary.cpp. This manipulation causes heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been publicly disclosed and may be utilized. Patch name: 4f52bff8c4075b5630422f902dd92a0af2c9f398. It is recommended to apply a patch to fix this issue.

References

https://github.com/WebAssembly/binaryen
https://github.com/WebAssembly/binaryen/
https://github.com/WebAssembly/binaryen/commit/4f52bff8c4075b5630422f902dd92a0af2c9f398
https://github.com/WebAssembly/binaryen/issues/8089
https://github.com/WebAssembly/binaryen/pull/8092
https://github.com/advisories/GHSA-vjgx-vcpf-hm6w
https://github.com/oneafter/1204/blob/main/hbf
https://nvd.nist.gov/vuln/detail/CVE-2025-14956
https://vuldb.com/?ctiid.337592
https://vuldb.com/?id.337592
https://vuldb.com/?submit.717315