Lucene search

GoogleOSV:CVE-2023-52284

HistoryDec 31, 2023 - 6:15 a.m.

CVE-2023-52284

2023-12-3106:15:08

Google

osv.dev

bytecode alliance

webassembly micro runtime

cve-2023-52284

software

double free error

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.4%

JSON

Bytecode Alliance wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) before 1.3.0 can have an “double free or corruption” error for a valid WebAssembly module because push_pop_frame_ref_offset is mishandled.

CPENameOperatorVersion
wasm-micro-runtimeeqWAMR-1.1.2
wasm-micro-runtimeeqWAMR-03-19-2020
wasm-micro-runtimeeqWAMR-1.0.0
wasm-micro-runtimeeqWAMR-02-27-2020
wasm-micro-runtimeeqWAMR-09-08-2020
wasm-micro-runtimeeqWAMR-07-10-2020
wasm-micro-runtimeeqWAMR-03-25-2021
wasm-micro-runtimeeqWAMR-03-30-2020
wasm-micro-runtimeeqWAMR-1.2.0
wasm-micro-runtimeeqWAMR-1.1.0

Name	Operator	Version
wasm-micro-runtime	eq	WAMR-1.1.2
wasm-micro-runtime	eq	WAMR-03-19-2020
wasm-micro-runtime	eq	WAMR-1.0.0
wasm-micro-runtime	eq	WAMR-02-27-2020
wasm-micro-runtime	eq	WAMR-09-08-2020
wasm-micro-runtime	eq	WAMR-07-10-2020
wasm-micro-runtime	eq	WAMR-03-25-2021
wasm-micro-runtime	eq	WAMR-03-30-2020
wasm-micro-runtime	eq	WAMR-1.2.0
wasm-micro-runtime	eq	WAMR-1.1.0

Rows per page:

1-10 of 271

References

github.com/bytecodealliance/wasm-micro-runtime/compare/WAMR-1.2.3...WAMR-1.3.0

github.com/bytecodealliance/wasm-micro-runtime/issues/2586

github.com/bytecodealliance/wasm-micro-runtime/pull/2590

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.4%

JSON

Related for OSV:CVE-2023-52284