This vulnerability affects the WebAssembly Binaryen project, specifically the IRBuilder::makeBrOn function in the wasm-ir-builder.cpp source file. The issue causes a reachable assertion failure when manipulated locally, potentially leading to a denial of service or other unintended behavior. The CVSS 4.8 score reflects a medium severity with local attack vector, low complexity, and no privileges required beyond local access. A patch commit has been identified but no official vendor advisory or remediation level is provided.

The vulnerability can be triggered locally to cause a reachable assertion failure in the Binaryen component, which may disrupt normal operation or cause a denial of service. There is no indication of remote exploitation, privilege escalation, or data confidentiality/integrity impact. No known active exploitation in the wild has been reported.

A patch identified by commit 1251efbc1ea471c1311d2726b2bbe061ff2a291c is suggested to address this vulnerability. Since no official vendor advisory is provided, users should apply this patch or upgrade to a version including this fix. Patch status is not yet confirmed by the vendor advisory; therefore, check the vendor's official channels for updated remediation guidance.