{"id":"CVE-2018-17292","details":"An issue was discovered in WAVM before 2018-09-16. The loadModule function in Include/Inline/CLI.h lacks checking of the file length before a file magic comparison, allowing attackers to cause a Denial of Service (application crash caused by out-of-bounds read) by crafting a file that has fewer than 4 bytes.","modified":"2026-07-08T14:14:57.096630Z","published":"2018-09-21T07:29:00.287Z","database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:a:webassembly_virtual_machine_project:webassembly_virtual_machine:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"2018-09-16"}],"source":"CPE_RANGE","vendor_product":"webassembly_virtual_machine_project:webassembly_virtual_machine"},{"extracted_events":[{"fixed":"2018-09-16"}],"source":"DESCRIPTION"}]},"references":[{"type":"FIX","url":"https://github.com/WAVM/WAVM/commit/2de6cf70c5ef31e22ed119a25ac2daeefd3d18a1"},{"type":"FIX","url":"https://github.com/WAVM/WAVM/issues/109"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/wavm/wavm","events":[{"introduced":"0"},{"fixed":"2de6cf70c5ef31e22ed119a25ac2daeefd3d18a1"}],"database_specific":{"source":"REFERENCES"}}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-17292.json","vanir_signatures_modified":"2026-07-08T14:14:57Z","vanir_signatures":[{"target":{"file":"Include/Inline/CLI.h"},"deprecated":false,"digest":{"line_hashes":["112379488776436947612710551796701402285","298952837052144306289224370212553157791","333636664427175226892314460735793132550","49201747908917128368529990071983717468"],"threshold":0.9},"id":"CVE-2018-17292-2958001b","signature_type":"Line","signature_version":"v1","source":"https://github.com/wavm/wavm/commit/2de6cf70c5ef31e22ed119a25ac2daeefd3d18a1"},{"digest":{"function_hash":"117933967364559220472287494539571197985","length":574},"id":"CVE-2018-17292-bf49ce6b","signature_type":"Function","signature_version":"v1","source":"https://github.com/wavm/wavm/commit/2de6cf70c5ef31e22ed119a25ac2daeefd3d18a1","target":{"file":"Include/Inline/CLI.h","function":"loadModule"},"deprecated":false}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}]}