CVE-2026-8257

LOW EPSS 5.5%
Published May 11, 20261mo ago · Modified Jun 17, 20261w ago
1.9 CVSS 4.0
Low
Find Similar
Published May 11, 2026 1mo ago
Last Modified Jun 17, 2026 1w ago

Description

A vulnerability was detected in WebAssembly Binaryen up to 117. This issue affects the function IRBuilder::makeBrOn of the file src/wasm/wasm-ir-builder.cpp of the component BrOn Parser. Performing a manipulation results in reachable assertion. The attack needs to be approached locally. The exploit is now public and may be used. The patch is named 1251efbc1ea471c1311d2726b2bbe061ff2a291c. It is suggested to install a patch to address this issue.

CVSS Details

Base Score
1.9
Exploitability
—
Impact
—
Vector string
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope X

Threat Intelligence

EPSS Exploit Probability
5.5% percentile
Exploit & Patch Status
Public Exploit Known
Patch Available

Weaknesses 1

CWE-617

Affected Products 1

VendorProductVersionRange
webassemblybinaryen* ≤117

References 8

  • github.com https://github.com/HackC0der/CVE-Repos/blob/main/wasm-binaryen/Assertion_Failure_isRef_wasm_Type_getHeapType_commit_3ef8d19
    Exploit
  • github.com https://github.com/WebAssembly/binaryen/
    Product
  • github.com https://github.com/WebAssembly/binaryen/commit/1251efbc1ea471c1311d2726b2bbe061ff2a291c
    Patch
  • github.com https://github.com/WebAssembly/binaryen/issues/8633
    ExploitIssue TrackingThird Party Advisory
  • github.com https://github.com/WebAssembly/binaryen/pull/8635
    MitigationPatch
  • vuldb.com https://vuldb.com/submit/809552
    Third Party AdvisoryVDB Entry
  • vuldb.com https://vuldb.com/vuln/362554
    Third Party AdvisoryVDB Entry
  • vuldb.com https://vuldb.com/vuln/362554/cti
    Permissions RequiredVDB Entry

Remediation

  • github.com https://github.com/WebAssembly/binaryen/commit/1251efbc1ea471c1311d2726b2bbe061ff2a291c
    Patch
  • github.com https://github.com/WebAssembly/binaryen/pull/8635
    MitigationPatch