CVE-2021-45293 is a Denial of Service vulnerability affecting Binaryen 103, specifically due to an invalid memory address dereference within the wasm::WasmBinaryBuilder::visitLet function. This impacts products such as fedoraproject binaryen, fedoraproject fedora, and webassembly binaryen. The vulnerability has a CVSS score of 5.5 (Medium), indicating it can be triggered by a local attacker with low attack complexity, requiring user interaction, and resulting in high availability impact. Its EPSS score is very low, suggesting a minimal likelihood of exploitation. Currently, there is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit or ExploitDB. The vulnerability has also received no community discussion or media coverage, aligning with the typical lack of attention for the majority of CVEs.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
103CPE matchmatch criteria | cpe:2.3:a:webassembly:binaryen:103:*:*:*:*:*:*:* | ||
34CPE matchmatch criteria | cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:* | ||
35CPE matchmatch criteria | cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.