CVE-2019-7704: Webassembly Binaryen

Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days.

wasm::WasmBinaryBuilder::readUserSection in wasm-binary.cpp in Binaryen 1.38.22 triggers an attempt at excessive memory allocation, as demonstrated by wasm-merge and wasm-opt.

Affected products

• Webassembly Binaryen: before 64 (fixed in 64)

Published 2019-02-10. Last modified 2026-06-17.