CVE-2021-46052: 
NixOS vulnerability analysis and mitigation

A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::Tuple::validate. The vulnerability was discovered in December 2021 and affects Binaryen version 104. The issue occurs when processing certain WebAssembly files, causing the program to abort execution (GitHub Issue).

The vulnerability is triggered by an assertion failure in the wasm::Tuple::validate function within wasm-type.h. Specifically, the assertion 'type.isSingle()' fails during the validation of WebAssembly types. The issue manifests during the parsing of type usage in the SExpressionWasmBuilder component, particularly when handling imports (GitHub Issue). The vulnerability has been assigned a CVSS v3.1 base score of 5.5 MEDIUM (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) (NVD).

The vulnerability results in a Denial of Service condition through program termination via an assertion abort. When exploited, it causes the Binaryen tool to crash during WebAssembly file processing, potentially disrupting WebAssembly compilation workflows (NVD).

According to the Debian Security Tracker, this issue is considered to have low security impact as it only affects the CLI tool with no significant security implications (Debian Security).