146 matches found
CVE-2023-27117
WebAssembly v1.0.29 was discovered to contain a heap overflow via the component component wabt::Node::operator...
CVE-2023-27117
WebAssembly v1.0.29 was discovered to contain a heap overflow via the component component wabt::Node::operator...
CVE-2023-27115
WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::catcomputesize...
CVE-2023-27115
WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::catcomputesize...
PT-2023-20961 · Unknown +1 · Webassembly +1
Name of the Vulnerable Software and Affected Versions: WebAssembly version 1.0.29 Description: A segmentation fault was discovered in WebAssembly via the component wabt::cat compute size. Recommendations: For version 1.0.29, at the moment, there is no information about a newer version that contai...
CVE-2023-27117
CVE-2023-27117 affects WebAssembly v1.0.29, with a heap overflow in wabt::Node::operator. The vulnerability is tied to WebAssembly’s wabt component; isolation and exploitation details in the provided documents are limited, but there is an explicit remediation note to update to a newer version tha...
CVE-2023-27115
CVE-2023-27115 concerns WebAssembly v1.0.29, where a segmentation fault was found in the component wabt::cat_compute_size. The issue, described in the CVE entry and corroborated by multiple feeds, indicates a fault in WebAssembly v1.0.29 that can affect availability. The CVSS 3.1 vector (AV:L, AC...
CVE-2023-27117
WebAssembly v1.0.29 was discovered to contain a heap overflow via the component component wabt::Node::operator...
CVE-2023-27119
WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::Decompiler::WrapChild...
CVE-2023-27119
CVE-2023-27119 : WebAssembly v1.0.29 contains a segmentation fault via the component wabt::Decompiler::WrapChild. Affects the WebAssembly toolchain; vulnerable code path can be triggered locally with user interaction, with availability impact listed as HIGH. No remediation or patch details are pr...
CVE-2023-27115
WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::catcomputesize...
CVE-2023-27117
WebAssembly v1.0.29 was discovered to contain a heap overflow via the component component wabt::Node::operator...
OSV-2022-1261 UNKNOWN WRITE in void std::__1::allocator_traits<std::__1::allocator<wabt::interp::HandlerDesc> >
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54245 Crash type: UNKNOWN WRITE Crash state: void std::1::allocatortraits void std::1::vectorwabt::interp::HandlerDesc, std::1::allocatorwabt::inter std::1::vectorwabt::interp::HandlerDesc, std::1::allocatorwabt::interp::Ha...
OSV-2022-1248 Object-size in wabt::BinaryReaderIR::OnCodeMetadataCount
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54092 Crash type: Object-size Crash state: wabt::BinaryReaderIR::OnCodeMetadataCount wabt::BinaryReader::ReadCodeMetadataSection wabt::BinaryReader::ReadCustomSection...
PYSEC-2022-43187
wasm-interp v1.0.29 was discovered to contain a heap overflow via the component std::vector::size at /bits/stlvector.h...
CVE-2022-43281
wasm-interp v1.0.29 was discovered to contain a heap overflow via the component std::vector::size at /bits/stlvector.h...
UBUNTU-CVE-2022-43281
wasm-interp v1.0.29 was discovered to contain a heap overflow via the component std::vector::size at /bits/stlvector.h...
Design/Logic Flaw
wasm-interp v1.0.29 was discovered to contain a heap overflow via the component std::vector::size at /bits/stlvector.h...
CVE-2022-43281
wasm-interp v1.0.29 was discovered to contain a heap overflow via the component std::vector::size at /bits/stlvector.h...
WABT 缓冲区错误漏洞
WABT is a WebAssembly binary toolkit open-sourced by WebAssembly. A security vulnerability exists in WABT wasm-interp version 1.0.29, which stems from an out-of-bounds read problem in the component OnReturnCallExpr-GetReturnCallDropKeepCount...