CVE:CVE-2021-45293
CNNVD:CNNVD-202112-2145
Binaryen是一款使用C++编写的用于WebAssembly的编译器基础结构和工具链库。
Binaryen 103 中存在缓冲区错误漏洞，该漏洞源于产品的wasm::WasmBinaryBuilder::visitLet函数对无效内存进行解引用。攻击者可通过该漏洞导致拒绝服务。
solution:Upgrade webassembly binaryen to a higher version than 103,and avoid the version 103; Upgrade fedoraproject fedora to a higher version than 34,35,and avoid the version 34,35