CVE-2024-34251

2024-05-0616:15:14

[email protected]

web.nvd.nist.gov

vulnerability

memory read

wasm-micro-runtime

denial of service

block_type_get_arity

interpreter

remote attacker

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

An out-of-bound memory read vulnerability was discovered in Bytecode Alliance wasm-micro-runtime v2.0.0 which allows a remote attacker to cause a denial of service via the “block_type_get_arity” function in core/iwasm/interpreter/wasm.h.

References

github.com/bytecodealliance/wasm-micro-runtime/issues/3347