CVE-2026-8257

Katalog CVE

CVSS 5.5 · Medium EPSS 0,19%

Kerentanan Reachable Assertion pada webassembly binaryen. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

A vulnerability was detected in WebAssembly Binaryen up to 117. This issue affects the function IRBuilder::makeBrOn of the file src/wasm/wasm-ir-builder.cpp of the component BrOn Parser. Performing a manipulation results in reachable assertion. The attack needs to be approached locally. The exploit is now public and may be used. The patch is named 1251efbc1ea471c1311d2726b2bbe061ff2a291c. It is suggested to install a patch to address this issue.

Rincian

Terbit di NVD

11 Mei 2026

Terakhir diubah

23 Juli 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-617: Reachable Assertion

EPSS (30 hari)

0,19% peluang dieksploitasi; lebih tinggi dari 7,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/WebAssembly/binaryen/commit/1251efbc1ea471c1311d2726b2bbe061ff2a291c patch
• https://github.com/WebAssembly/binaryen/pull/8635 mitigasi · patch
• https://github.com/WebAssembly/binaryen/issues/8633 exploit · issue tracking · advisory pihak ketiga
• https://vuldb.com/submit/809552 advisory pihak ketiga · vdb entry
• https://vuldb.com/vuln/362554 advisory pihak ketiga · vdb entry
• https://github.com/HackC0der/CVE-Repos/blob/main/wasm-binaryen/Assertion_Failure_isRef_wasm_Type_getHeapType_c... exploit
• https://github.com/WebAssembly/binaryen/ product
• https://vuldb.com/vuln/362554/cti permissions required · vdb entry