{"id":"CVE-2019-15758","details":"An issue was discovered in Binaryen 1.38.32. Missing validation rules in asmjs/asmangle.cpp can lead to an Assertion Failure at wasm/wasm.cpp in wasm::asmangle. A crafted input can cause denial-of-service, as demonstrated by wasm2js.","modified":"2026-04-11T12:42:14.542172Z","published":"2019-08-29T02:15:10.553Z","references":[{"type":"FIX","url":"https://github.com/WebAssembly/binaryen/issues/2288"},{"type":"FIX","url":"https://github.com/WebAssembly/binaryen/pull/2290"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/webassembly/binaryen","events":[{"introduced":"0"},{"fixed":"e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f"}],"database_specific":{"versions":[{"introduced":"0"},{"fixed":"89"}]}}],"versions":["1.36.10","1.36.11","1.36.12","1.36.13","1.36.14","1.36.2","1.36.3","1.36.4","1.36.5","1.36.6","1.36.7","1.36.8","1.36.9","1.37.0","1.37.1","1.37.10","1.37.11","1.37.12","1.37.13","1.37.14","1.37.15","1.37.16","1.37.17","1.37.18","1.37.19","1.37.2","1.37.20","1.37.21","1.37.22","1.37.23","1.37.24","1.37.25","1.37.26","1.37.27","1.37.28","1.37.29","1.37.3","1.37.30","1.37.31","1.37.32","1.37.33","1.37.34","1.37.35","1.37.36","1.37.37","1.37.39","1.37.4","1.37.40","1.37.5","1.37.6","1.37.7","1.37.8","1.37.9","1.38.0","1.38.1","1.38.10","1.38.11","1.38.12","1.38.13","1.38.14","1.38.15","1.38.16","1.38.17","1.38.18","1.38.19","1.38.2","1.38.20","1.38.21","1.38.22","1.38.23","1.38.24","1.38.25","1.38.26","1.38.27","1.38.28","1.38.29","1.38.3","1.38.30","1.38.31","1.38.32","1.38.4","1.38.5","1.38.6","1.38.7","1.38.8","1.38.9","binary_0xb","version_1","version_10","version_11","version_12","version_13","version_14","version_15","version_16","version_17","version_18","version_19","version_2","version_20","version_21","version_22","version_23","version_24","version_25","version_26","version_27","version_28","version_29","version_3","version_30","version_31","version_32","version_33","version_34","version_35","version_36","version_37","version_38","version_39","version_4","version_40","version_41","version_42","version_43","version_44","version_45","version_46","version_47","version_48","version_49","version_5","version_50","version_51","version_52","version_53","version_54","version_55","version_56","version_57","version_58","version_59","version_6","version_60","version_61","version_62","version_63","version_64","version_65","version_66","version_67","version_68","version_69","version_7","version_70","version_71","version_72","version_73","version_74","version_75","version_76","version_77","version_78","version_79","version_8","version_80","version_81","version_82","version_83","version_84","version_85","version_86","version_87","version_88","version_9"],"database_specific":{"vanir_signatures":[{"signature_version":"v1","target":{"file":"src/wasm/wasm-validator.cpp"},"source":"https://github.com/webassembly/binaryen/commit/e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f","deprecated":false,"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["284312962941361374447285309641989302750","145184710084128555006271813020640012304","209632246497501939951786576078197623224","22453390469791613076464393281680667441","163224745323891624458634927948825601942","285709915065470399400301804713873451449","237159662498307743891933980034385131601","77608791595765091400601031763624442897","64685632213862493609884507543787304800","58405384083425798750138476933135188175","219111799544520282719509766946695156079","254975487970077719779920078993958062565","166075185544854468505741557651463175503","273740599677775379390077108830296438052","239961360052481188568016299966243384968","162067914067717230207091073776273041018","17579020017158267524229110167192996491","198912008430827458821085663972872626258","293918171173490581929722229865759114418"]},"id":"CVE-2019-15758-057f8096"},{"signature_version":"v1","target":{"function":"flexibleCopy","file":"src/ir/ExpressionManipulator.cpp"},"source":"https://github.com/webassembly/binaryen/commit/e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f","deprecated":false,"signature_type":"Function","digest":{"length":6731,"function_hash":"208560838188485650931241483647216884703"},"id":"CVE-2019-15758-0ae8cc3d"},{"signature_version":"v1","target":{"file":"src/binaryen-c.h"},"source":"https://github.com/webassembly/binaryen/commit/e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f","deprecated":false,"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["118760701912807830701165202572096438443","262245963208240778698507266534996366776","286541758201026169222347331582254864054","126270896038133000926224900782877532892","175696798682471107538888974373399935865","187543218510959190745156972392142968832","116710217025727799556045732972133210815","122624402147413445918019168295163261731","183229618255449114167286602376891234289","94112460573338845592311266299049715617","248011603293769525604600842851494979237"]},"id":"CVE-2019-15758-0aeba998"},{"signature_version":"v1","target":{"function":"StackIRToBinaryWriter::write","file":"src/wasm/wasm-stack.cpp"},"source":"https://github.com/webassembly/binaryen/commit/e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f","deprecated":false,"signature_type":"Function","digest":{"length":588,"function_hash":"84728659031510991932485144909231446872"},"id":"CVE-2019-15758-33bde316"},{"signature_version":"v1","target":{"file":"src/ir/type-updating.h"},"source":"https://github.com/webassembly/binaryen/commit/e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f","deprecated":false,"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["26872198827644710708133343068208322434","244465497463217761719209737099588887705","329745263814387812024657935640255415087","113913586536950036936161652669622978223","144866619093062485624869599735499460527","162023644220014459015411484567252060465","306926569752536228542064488621556280028","163668644750461840913232522408725961397","78862592169885390075023594493510960452","184076216839934406811664693539875700011","211122670391728943703639929410783091816","117900760747911089258916248483479824175","181623181690632531475455492087197828920","241041397042023531712276420238675124909","311759334974771000111074316027096428517","51372046565053389061585417170828505663"]},"id":"CVE-2019-15758-340efc8e"},{"signature_version":"v1","target":{"function":"getExpressionName","file":"src/wasm/wasm.cpp"},"source":"https://github.com/webassembly/binaryen/commit/e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f","deprecated":false,"signature_type":"Function","digest":{"length":2125,"function_hash":"216726006977233010291820204762816171883"},"id":"CVE-2019-15758-34528b63"},{"signature_version":"v1","target":{"function":"visitImmediates","file":"src/ir/ExpressionAnalyzer.cpp"},"source":"https://github.com/webassembly/binaryen/commit/e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f","deprecated":false,"signature_type":"Function","digest":{"length":3879,"function_hash":"299002371630910618442579675274522982056"},"id":"CVE-2019-15758-3d00332e"},{"signature_version":"v1","target":{"file":"src/ir/ExpressionManipulator.cpp"},"source":"https://github.com/webassembly/binaryen/commit/e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f","deprecated":false,"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["158887832143725368634945357000026434557","305944911995272507318874380717943243927","9545694594185371337876729080461773301","116740819221826707579422537752087915524"]},"id":"CVE-2019-15758-420711a7"},{"signature_version":"v1","target":{"function":"BinaryInstWriter::mapLocalsAndEmitHeader","file":"src/wasm/wasm-stack.cpp"},"source":"https://github.com/webassembly/binaryen/commit/e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f","deprecated":false,"signature_type":"Function","digest":{"length":1783,"function_hash":"114551221647446838469615221602317477485"},"id":"CVE-2019-15758-43e0f001"},{"signature_version":"v1","target":{"file":"src/wasm-traversal.h"},"source":"https://github.com/webassembly/binaryen/commit/e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f","deprecated":false,"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["157728857034594970980876673188526334866","5128724453058562240890067663023698278","333386028366421900653515419503474105665","2984342214099569134079157660157725386","238449669759286352779820988239697283685","207448059058157004370338440562501545241","293758795560032740532626749594437069088","161788977962824642078386751282694993584","141790830124421813235426387925482404767","19249187429000663330598850714967461297","322643467397746228610743988378062852610","103249781646032292931824355547737197651","238449669759286352779820988239697283685","207448059058157004370338440562501545241","293758795560032740532626749594437069088","161788977962824642078386751282694993584","84757050311682089257624910896137801787","60355626189371042302341055762404059031","119612138032007196700101286415126831182","126818121903183243163180943806956726026","67664680448983847223502473999685987064","63048521991290555779815122116356190713","75452703700674540861495341176891882487","228564240163978825815278622016614387800","126067966404672387345401863056462169813","333819688140845356259005493368358675342","203956161527816456047340657444227851516","213456378127577072862052659893717657576","226930816261326175431731035193955068911","98283783604616547369481855072999535113","244928318770615721331722211221323154417","109008893721936904176416117763898280979","225358765832609328379418423813860892094","167568090997804915009883373681697905518","276334840897211289792746002027992660541"]},"id":"CVE-2019-15758-4577371b"},{"signature_version":"v1","target":{"function":"WasmBinaryBuilder::processExpressions","file":"src/wasm/wasm-binary.cpp"},"source":"https://github.com/webassembly/binaryen/commit/e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f","deprecated":false,"signature_type":"Function","digest":{"length":905,"function_hash":"307163831027222522020961669900178730937"},"id":"CVE-2019-15758-48c890f2"},{"signature_version":"v1","target":{"file":"src/wasm-stack.h"},"source":"https://github.com/webassembly/binaryen/commit/e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f","deprecated":false,"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["51116763408708475247911643135537246769","48302415225217136875753595730742542584","269980601319610818239604436650032446100","106198103151786407458520299338291441202","182461082676127411473837652477964267783","301094648491146434512332700067082819881","97734588839098044765482646112767670357","30706556918685572934138483669042656528","326710688521264740912442961417460192547","139040396444553776384402958493685875735","123831311272921742010942830480438399235","121152854296725804004930357402050859256","182461082676127411473837652477964267783","301094648491146434512332700067082819881","97734588839098044765482646112767670357","30706556918685572934138483669042656528","3168394547131796746631508873399274327","95986509686036311962352384108135074192","92337886957702206353430327328098019549","73599348194480203760353669582034838032","283323050329848274573184775412492301149","70022558971605887386614654842946048543","30586446280970409957853755085804869970","213494279218196239994716286667601989369","212679746984637000615574475245648820640","278129127696891918430169713738740411746","252272578020824351630812858151677129690","307682937040706081002441427786505381032","295780868473162872686459037968084052560","36579571187917272570613914071384687470","314678788165044459253211091174356471467","162211846798482665411971932328853298802","183456739311059342096709606582255113064","93237846622845857150664185838483714691"]},"id":"CVE-2019-15758-4d3e71b0"},{"signature_version":"v1","target":{"function":"getUniqueTargets","file":"src/ir/branch-utils.h"},"source":"https://github.com/webassembly/binaryen/commit/e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f","deprecated":false,"signature_type":"Function","digest":{"length":101,"function_hash":"32635537046210682839266586994326845821"},"id":"CVE-2019-15758-4f731f47"},{"signature_version":"v1","target":{"function":"test_core","file":"test/example/c-api-kitchen-sink.c"},"source":"https://github.com/webassembly/binaryen/commit/e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f","deprecated":false,"signature_type":"Function","digest":{"length":13049,"function_hash":"137878412902146798588343857024990544020"},"id":"CVE-2019-15758-54606df5"},{"signature_version":"v1","target":{"file":"src/wasm/wasm-s-parser.cpp"},"source":"https://github.com/webassembly/binaryen/commit/e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f","deprecated":false,"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["111460793019794031431026542149805302018","96263300646731955766479133615311221089","198603619233958792328252135934696674190"]},"id":"CVE-2019-15758-637b9a99"},{"signature_version":"v1","target":{"function":"replacePossibleTarget","file":"src/ir/branch-utils.h"},"source":"https://github.com/webassembly/binaryen/commit/e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f","deprecated":false,"signature_type":"Function","digest":{"length":479,"function_hash":"260837808605718667691929393458672549334"},"id":"CVE-2019-15758-6a1fdd8f"},{"signature_version":"v1","target":{"function":"discoverBreaks","file":"src/ir/type-updating.h"},"source":"https://github.com/webassembly/binaryen/commit/e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f","deprecated":false,"signature_type":"Function","digest":{"length":238,"function_hash":"270924844650736801758100092923029827174"},"id":"CVE-2019-15758-6bb6726e"},{"signature_version":"v1","target":{"file":"src/wasm/wasm.cpp"},"source":"https://github.com/webassembly/binaryen/commit/e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f","deprecated":false,"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["56159712285572195878383161459885710203","248326157510035460770034102514925804661","183438682779107591961878707167412030018","212938627208702616485823524252126481707","307968017827364463068284645732850927282","213663069536631808352036131108479368019","154075704608574232165143247494757737449","73011764911052151397034562187901816378","248763083826825284219277039164495247915","275331092253454777818589688395867228335"]},"id":"CVE-2019-15758-6d25c3a0"},{"signature_version":"v1","target":{"file":"test/example/c-api-kitchen-sink.c"},"source":"https://github.com/webassembly/binaryen/commit/e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f","deprecated":false,"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["37643392674426737093742019846468977210","323779709456458286349635352675648027338","263579505718358516663517547339893299097","224620872919211863107987329515491540408","131539727970215132120187606467824519814","171487251003903998682977093672482279775","309559021324109095483240448833391319710","312149043121632495468215354226189149343","204346581145907725943081183292753708313","164158386483891502804152686072738883133","298755713649330684711203590368081056039","282423897892702409320564659943522842301","45936007994684000152630649835525898511","261657868230799752197479543231412677061","141236648871186729645418766973641668265","12153474836099031149513000535357461801","156206266383584905245861408994208201917"]},"id":"CVE-2019-15758-6f9dbcdc"},{"signature_version":"v1","target":{"file":"src/wasm/wasm-stack.cpp"},"source":"https://github.com/webassembly/binaryen/commit/e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f","deprecated":false,"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["11895143622374540222444258634895247299","53573774808483109715814294298558000785","1760442431342948391906811707056712594","115886700734952731586460710346603819899","10262151486741224122838723874588357099","145034890977489208998174101079546875207","81009619051709691777683179672747909260","1922420661060041706722631630380585655","274634207417457559183639329643858428181","44798016635329096466320748699858399099","71261619929790890706608185842819260534","102683483909050923822453351525170192640","337458255537855064193495588369475391418","281197168509972705987133033822813062569","310075622231216705112631951220443626007","282822237797843110029952521975588814270","146283795052112345188181789492821001481","112981484880529534969178283496494419514","214780316162259101047670879450754832011","258431446532604465075072479572660961408","79674632158981974031889873469686568823","319470570630504648325047893652327428918","213008177089260300816209785465903854015","33075466614300945467682173723058051814","311578538001848972606575383414072998794","21683697632898667834587509972294898672","319961991675617327872434749739242882594","197837508190173201174773784576512483365"]},"id":"CVE-2019-15758-722dbc14"},{"signature_version":"v1","target":{"file":"src/ir/ExpressionAnalyzer.cpp"},"source":"https://github.com/webassembly/binaryen/commit/e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f","deprecated":false,"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["299479569038884667381019597814423609690","43508925909753156256001255321295101955","266094059317989981070306909950623296655","164189807419231536212789333538120087989"]},"id":"CVE-2019-15758-7349d590"},{"signature_version":"v1","target":{"file":"src/wasm/wasm-binary.cpp"},"source":"https://github.com/webassembly/binaryen/commit/e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f","deprecated":false,"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["219319827370123297718872005906428815434","194065705085636900539645953896541817976","80731985756848176719035052859585302032","271246671301759962906578821655308370530","290722799271874625445568194276445739240","40456916803288584393692300399221298080","157516702128612837437582212351124468672","221063145726765587070496772218809305163","152117833769453339488927540607769868222","289820128434978688711354880547210201833","142076906242204106061193681889299565091","264589982153806974960215410193976102195","218773201276762140263119533733474480092","52060574852506879729871019104000324613","308171816150869674113971836208099575171","246657704062298961860242010240887939254","313688183341679356400278568515062351980","194009791654594748885194071987055439910","275603751691773990234465404822502927811","5975303223370563459312820854494520151","131701103353298417765850341300448280435","282981224083996864318819951073532406626","153271792919717938735973698431588853492","292247659374751084371255146096906148127"]},"id":"CVE-2019-15758-77f5f11b"},{"signature_version":"v1","target":{"file":"src/ir/branch-utils.h"},"source":"https://github.com/webassembly/binaryen/commit/e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f","deprecated":false,"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["58390079415571787420753989116835475499","103201821398071040614743937068974037044","237149916854610424484398907906641315810","139500645805412959855104804516927800546","327811242337570021585127114386098782251","251371581468127860398098336614772231265","310705825504125016847954022691908200030","315228736114760432620752065357491938072","174685728588742439684132907180574779169","283706910883633714773899977010899185280","90630442761476570792586211922833652196","102961724683997977715622047871211184401","56724294474990008996289876150156879668","125015156676016361376136283499908699290","218432015669648256538525522824521697462","75178496605366622251377699590039728403","232706006029523133884770080987574360653","97687804400690043224829560648818039983","245856033951541016376614469557005140290","50015031236204621777457221066246177422","200630818385137397150511221492476222968","219826406080882424611678519341950423199","128723830204864329377522607583731522886","214898880607500776168569400999172540818","193191894980761970607552317412653897337","305267029443125731587101443984790236123","219706783950984485254058686312032786803","148718478724057162398310140759182688213","127837883978680828031227368451528288173","242042993261430305573675322868992540898","251818389476602951982493478578761118618","25280339760456417743316700785935008743","183967979670177958801282306965755763178","225901283871801784021140119837662464798","299850055699889631067572768664903951712","20816943439502716485829491075287566153","59864870618826354546665064600290426493","190313411206607109439545498968269910305","317240585992475388109764538777232758967","132569169294008434983400940943768603809","323186839787211365233450971911542806377","43436908769434666617008954274251411838"]},"id":"CVE-2019-15758-78bfb31e"},{"signature_version":"v1","target":{"function":"WasmBinaryBuilder::readExpression","file":"src/wasm/wasm-binary.cpp"},"source":"https://github.com/webassembly/binaryen/commit/e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f","deprecated":false,"signature_type":"Function","digest":{"length":5088,"function_hash":"112926768295476999873299448527122974401"},"id":"CVE-2019-15758-7935c738"},{"signature_version":"v1","target":{"file":"src/binaryen-c.cpp"},"source":"https://github.com/webassembly/binaryen/commit/e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f","deprecated":false,"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["21533863587211088488440263328516949304","11191061964684202276502480855417325077","35901102811503701084629547186314577712","136310701097086063756395265813544657653","232530625984118492446869773100493055181","14615217851283247302167633969923825966","251501429537351580819486389385267467662","2441454141173897738164666591642414208","43146713413918733789894996835257763600","105067225754356636521542438081826313216","267356987007434228375027426914980321415","279988771270435733663501311845591210006","285215675672225902618728049284718212737","214587788518260935657154696279957435543","111449250685256285221409378024916689327"]},"id":"CVE-2019-15758-82f01580"},{"signature_version":"v1","target":{"function":"WasmPrinter::printStackIR","file":"src/passes/Print.cpp"},"source":"https://github.com/webassembly/binaryen/commit/e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f","deprecated":false,"signature_type":"Function","digest":{"length":957,"function_hash":"15752656505713074632587947316669891221"},"id":"CVE-2019-15758-852b1f60"},{"signature_version":"v1","target":{"file":"src/passes/DeadCodeElimination.cpp"},"source":"https://github.com/webassembly/binaryen/commit/e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f","deprecated":false,"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["258861296997582226993287794886315747964","226209299435871170727828256932556523442","163765673835072494039120066181710778536","295648566489813510874457566356101441877","49312933985307048009199785768199316384","2577242691387792038280308965281856679","101764564915981634874748449191954728336"]},"id":"CVE-2019-15758-861d2797"},{"signature_version":"v1","target":{"function":"StackIRGenerator::emit","file":"src/wasm/wasm-stack.cpp"},"source":"https://github.com/webassembly/binaryen/commit/e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f","deprecated":false,"signature_type":"Function","digest":{"length":402,"function_hash":"47687653220829777801273056760415558752"},"id":"CVE-2019-15758-897c6efd"},{"signature_version":"v1","target":{"file":"src/wasm-binary.h"},"source":"https://github.com/webassembly/binaryen/commit/e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f","deprecated":false,"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["289244805070972486916554939481607587884","44753841194161338885818786135290109037","158714194327364925465362251724467884975","264572655528139337447551073239124747399","214237534893872716190667357348970066236","84528072940057648510279199322521866904","90843470174692743450419196340017897952","137951129235603528884235144909804150040","98132592372834744452440723689251916895","154537260019098519981530778045152165687","132981758228800910348869821798546271952","266533016716816455656548612023085195660","206203228484710668026031648647079144224","74065795496212049877320523652274967481","319970092096522674699793771527512739501","75057538011832931829677958353172363940","20471468273340117056428708746750534326","212764391265296142985807520597880668142","78902283097583898122430428241867642985","45606908962351618712650050693825307776","293647363422160327075858805888818696116","193542149274908547048361745035338589159","302565322587601043625399227185037201769","243573999545754921250595082107231126492","186663228604073105496051343056881416185","307156886995941251873374207670102769039","120283562099515333867602762203482798291","157851925985085393423186206949503710940","327273553279454941502036028348923931564","20428376636173949120031802473732930560","294931863815175080486002911071088256994","203730330284592278301920073382403652328","327324916830411857217718429956209823078","66489494266490771883430690952158916397","176686968984635301405105755687328100782","265663156050845484644618106299521321683","77146237580633491549158748127818639527","191896523379862623021850883035919708880","198504715740213928734549791578492194440","138637435955651977923455698499632206647"]},"id":"CVE-2019-15758-8a1d300e"},{"signature_version":"v1","target":{"function":"scan","file":"src/passes/DeadCodeElimination.cpp"},"source":"https://github.com/webassembly/binaryen/commit/e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f","deprecated":false,"signature_type":"Function","digest":{"length":3119,"function_hash":"20174293366011928935575149474873251876"},"id":"CVE-2019-15758-8c50462c"},{"signature_version":"v1","target":{"function":"StackIRGenerator::emitScopeEnd","file":"src/wasm/wasm-stack.cpp"},"source":"https://github.com/webassembly/binaryen/commit/e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f","deprecated":false,"signature_type":"Function","digest":{"length":392,"function_hash":"173071828391051315233470855598529237842"},"id":"CVE-2019-15758-8c584e1a"},{"signature_version":"v1","target":{"function":"getExitingBranches","file":"src/ir/branch-utils.h"},"source":"https://github.com/webassembly/binaryen/commit/e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f","deprecated":false,"signature_type":"Function","digest":{"length":598,"function_hash":"39144445275591829733155138122457226277"},"id":"CVE-2019-15758-8f2e1680"},{"signature_version":"v1","target":{"function":"FunctionValidator::noteBreak","file":"src/wasm/wasm-validator.cpp"},"source":"https://github.com/webassembly/binaryen/commit/e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f","deprecated":false,"signature_type":"Function","digest":{"length":700,"function_hash":"165491140983819270236997875687888827978"},"id":"CVE-2019-15758-92f21fc9"},{"signature_version":"v1","target":{"function":"WasmBinaryBuilder::getBlockOrSingleton","file":"src/wasm/wasm-binary.cpp"},"source":"https://github.com/webassembly/binaryen/commit/e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f","deprecated":false,"signature_type":"Function","digest":{"length":741,"function_hash":"278943098219268390525140390115902494115"},"id":"CVE-2019-15758-a3d7eefd"},{"signature_version":"v1","target":{"file":"src/passes/Precompute.cpp"},"source":"https://github.com/webassembly/binaryen/commit/e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f","deprecated":false,"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["246811043020264069836060250910855800015","96699100531013637924977094048355562755","232777518150596984195653554070294716698","175842262519825578091886852171156597647"]},"id":"CVE-2019-15758-b0bbbdc7"},{"signature_version":"v1","target":{"function":"Wasm2JSBuilder::processFunctionBody","file":"src/wasm2js.h"},"source":"https://github.com/webassembly/binaryen/commit/e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f","deprecated":false,"signature_type":"Function","digest":{"length":30533,"function_hash":"237503507230072204298898012683293627168"},"id":"CVE-2019-15758-b6e4931e"},{"signature_version":"v1","target":{"file":"src/ir/utils.h"},"source":"https://github.com/webassembly/binaryen/commit/e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f","deprecated":false,"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["163224745323891624458634927948825601942","119503213474552946887490028620467019035","97734588839098044765482646112767670357","107156181888705536353839703427031432377","52562073311988651726610863323086528391","87732412403211403308730698372639883116","325560908133830430325330019291994313427","149340416913428749107372519662217561237"]},"id":"CVE-2019-15758-b9cc9615"},{"signature_version":"v1","target":{"file":"src/passes/Print.cpp"},"source":"https://github.com/webassembly/binaryen/commit/e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f","deprecated":false,"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["117878162182333816655107074202070679158","42875797316844900535818365929389623783","6882072560815830136603716792602061524","11666121632046727527050989339043535337","245997400382127162606692633538359874273","213153593177546446526486796746589253625","215416175553125930514665016021659135294","56895258695479181335987975168924079469","212174839462996019936148448208494880804","256056608628766325183864185984461384436","1735346893697652740141115664856088702","301093729283658957926794846402448908386","188663426577675368711036110630402433354","91737481432540426307051538371170223290","110115533456927790633116090507797284648","2447297434135344795659992146915219418","9285371568594040753299245790807762193","109913349669128251561506709849751358123","159678081970423856669676166978154124211","123081611183133189672736657688387679490","149817967366700061171097485749060270981","298877238199293478324803564179278120036","48535059799428017612084544933804098094","183289371010245324407683730185710012628","215693634398871978427735459937251519958","163101592911206062077687651692818984138","286766701593510446240049415004639886383","62837446573678947302754348411022023261","173165982789229487801836211013558439991","187662050067640532164055558153982297373","45238954388646764349216201291563692116","163260987991537873159554116800352183114","208113110307220188559290894550498896196","122860936587646240596871741295350866023","216125356942187382011851976176969446024","316906265474376627872784025080443412138","182132722428923605589128394103405397897","190905606793347656766549838355762225024","72658413759221940509546133072200011439","3926342439826478736656065214810181759","197453355078676974157775503712605183125","306413915277559909894365047211544245915","43759600285381499198244300725803037681","87585293562131325434469862445375786456","75995146015546901536686003881248242344","211278193645517842337575546278418936705","204155076241577127779932007393174376938","150376202108412472440572603590502405379","79792722418114628669153917372419242893","330607647509831241113161140275220292592","319961991675617327872434749739242882594","197837508190173201174773784576512483365"]},"id":"CVE-2019-15758-bb39d97f"},{"signature_version":"v1","target":{"file":"src/wasm-s-parser.h"},"source":"https://github.com/webassembly/binaryen/commit/e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f","deprecated":false,"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["116440624402721339787082337371819245438","29805643356488945242512163679551549641","193918729021254202580303847434049420140","35004310370646344065758170110892409287"]},"id":"CVE-2019-15758-c234121b"},{"signature_version":"v1","target":{"file":"src/wasm-builder.h"},"source":"https://github.com/webassembly/binaryen/commit/e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f","deprecated":false,"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["317740820586626732285370803722090641087","137615378860024331950388166091070120119","306665144504794043044349337257331505436","253858830895738781294757787266948906247","94376368813474448327171308730469412970","325228511974899483475077252437497779314","191783696703614387155897245590230589414","124219396015458584532766421852616433924"]},"id":"CVE-2019-15758-c48e87a9"},{"signature_version":"v1","target":{"file":"src/ir/effects.h"},"source":"https://github.com/webassembly/binaryen/commit/e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f","deprecated":false,"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["41953421747168558052300946762277818011","46814157223117757532879887616666035904","237651297728664431603100141480987537353","318710325136589840994957730045931033831"]},"id":"CVE-2019-15758-d8cb559c"},{"signature_version":"v1","target":{"function":"visitBlock","file":"src/passes/RemoveUnusedNames.cpp"},"source":"https://github.com/webassembly/binaryen/commit/e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f","deprecated":false,"signature_type":"Function","digest":{"length":801,"function_hash":"107852903506815661970703530517698091766"},"id":"CVE-2019-15758-e50d2c61"},{"signature_version":"v1","target":{"function":"isBranchReachable","file":"src/ir/branch-utils.h"},"source":"https://github.com/webassembly/binaryen/commit/e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f","deprecated":false,"signature_type":"Function","digest":{"length":222,"function_hash":"14152323496370627995653908408744905259"},"id":"CVE-2019-15758-e58e92e4"},{"signature_version":"v1","target":{"file":"src/ir/ReFinalize.cpp"},"source":"https://github.com/webassembly/binaryen/commit/e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f","deprecated":false,"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["173725862549463957985670586546478664691","292778184486919832128670966392963655913","76097496629221951365817502486508654926","323406611616814531599222294773459567521","105137532697535246153001577685113530277","112481913749339631164787363667562961259","127776927103167305837756420186083609859"]},"id":"CVE-2019-15758-e79f3097"},{"signature_version":"v1","target":{"function":"noteBreakChange","file":"src/ir/type-updating.h"},"source":"https://github.com/webassembly/binaryen/commit/e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f","deprecated":false,"signature_type":"Function","digest":{"length":487,"function_hash":"106032446203758211159866054669297089926"},"id":"CVE-2019-15758-e8f5e1c0"},{"signature_version":"v1","target":{"function":"visitExpression","file":"src/ir/type-updating.h"},"source":"https://github.com/webassembly/binaryen/commit/e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f","deprecated":false,"signature_type":"Function","digest":{"length":598,"function_hash":"27423390881267169819383451793999138693"},"id":"CVE-2019-15758-edcb5364"},{"signature_version":"v1","target":{"file":"src/wasm-interpreter.h"},"source":"https://github.com/webassembly/binaryen/commit/e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f","deprecated":false,"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["134430281324831345464570414144012343754","216596951090372892430488056004645436745","251079283812327323834896477150647973032","295586164563880948924674727844533438524"]},"id":"CVE-2019-15758-f14c1ab3"},{"signature_version":"v1","target":{"file":"src/wasm.h"},"source":"https://github.com/webassembly/binaryen/commit/e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f","deprecated":false,"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["247609429860866199230438043891145650831","110045571829275746152338198929808200643","4680687000280418279290596298540378218","286802692452546295568658901283738415996","288268923038430809250551971006998832142","304338139320384748171897704934376037095","334016431508134902373456764592154465198"]},"id":"CVE-2019-15758-fad90c27"},{"signature_version":"v1","target":{"file":"src/passes/RemoveUnusedNames.cpp"},"source":"https://github.com/webassembly/binaryen/commit/e2f49d8227f2b71e4dede5cf4074bb9f65e3d77f","deprecated":false,"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["201606975951367498484434788531165239673","98330057070997397237312566276708336120","70456590215990461614212745879073046691","181649031891359760751288079418137220369","40983722438935293108428925931556117","176727731393372037363243045717850783082","128723830204864329377522607583731522886"]},"id":"CVE-2019-15758-ffcaa07f"}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-15758.json","vanir_signatures_modified":"2026-04-11T12:42:14Z"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}]}