CVE-2019-15759

CVE-2019-15759 is a denial-of-service vulnerability affecting Binaryen version 1.38.32. Specifically, a NULL pointer dereference in the wasm::LocalSet::finalize function within ir/ExpressionManipulator.cpp can be triggered by a specially crafted input, leading to segmentation faults. This vulnerability has a CVSS score of 6.5 (Medium) with an attack vector of network and low attack complexity, meaning it can be exploited remotely with minimal effort, resulting in high availability impact. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.