wasm3 缓冲区错误漏洞

wasm3 is the fastest WebAssembly interpreter, as well as the most versatile runtime. A security vulnerability exists in Wasm3 0.5.0 that stems from having an out-of-bounds write in a compilation block called from Compile LoopOrBlock and CompileBlockStatements...

CVE-2021-45947

Wasm3 0.5.0 has an out-of-bounds write in RuntimeRelease called from EvaluateExpression and InitDataSegments...

CVE-2021-45947

Wasm3 0.5.0 is affected by an out-of-bounds write in Runtime_Release, triggered from EvaluateExpression and InitDataSegments. This is the concrete issue described across CVE-2021-45947 entries (e.g., Red Hat, NVD, OSV). The vulnerability appears in the runtime code path of Wasm3, potentially impa...

CVE-2021-45947

Wasm3 0.5.0 has an out-of-bounds write in RuntimeRelease called from EvaluateExpression and InitDataSegments...

CVE-2021-45946

Wasm3 0.5.0 has an out-of-bounds write in CompileBlock called from CompileLoopOrBlock and CompileBlockStatements...

CVE-2021-45946

Wasm3 0.5.0 has an out-of-bounds write in CompileBlock called from CompileLoopOrBlock and CompileBlockStatements...

CVE-2021-45946

Wasm3 0.5.0 contains an out-of-bounds write in the CompileBlock path, triggered by Compile_LoopOrBlock and CompileBlockStatements. This is the documented root cause of CVE-2021-45946, as reflected across multiple sources (NVD, Red Hat, OSV, CVE lists). The connected records confirm the vulnerable...

CVE-2021-45929

Wasm3 0.5.0 has an out-of-bounds write in CompileBlock called from CompileElseBlock and CompileIf...

CVE-2021-45929

Wasm3 0.5.0 has an out-of-bounds write in CompileBlock called from CompileElseBlock and CompileIf...

CVE-2021-45929

CVE-2021-45929 affects Wasm3 0.5.0 with an out-of-bounds write in the CompileBlock function (invoked by CompileElseBlock and Compile_If). The connected sources confirm the exact vulnerable component and code path, but there is no public detail on exploit status, impact scope, or available fixes i...

PT-2021-24332

Name of the Vulnerable Software and Affected Versions: Wasm3 version 0.5.0 Description: The issue is related to an out-of-bounds write in the Runtime Release function, which is called from EvaluateExpression and InitDataSegments. Recommendations: For Wasm3 version 0.5.0, at the moment, there is n...

PT-2021-24319

Name of the Vulnerable Software and Affected Versions: Wasm3 version 0.5.0 Description: The issue is related to an out-of-bounds write in the CompileBlock function, which is also called from CompileElseBlock and Compile If. Recommendations: For Wasm3 version 0.5.0, at the moment, there is no...

PT-2021-24331

Name of the Vulnerable Software and Affected Versions: Wasm3 version 0.5.0 Description: The issue is related to an out-of-bounds write in the CompileBlock function, which is called from Compile LoopOrBlock and CompileBlockStatements. Recommendations: For Wasm3 version 0.5.0, at the moment, there ...

CVE-2021-45946: Out-of-bounds Write

Wasm3 0.5.0 has an out-of-bounds write in CompileBlock called from CompileLoopOrBlock and CompileBlockStatements...

CVE-2021-45929: Out-of-bounds Write

Wasm3 0.5.0 has an out-of-bounds write in CompileBlock called from CompileElseBlock and CompileIf...

CVE-2021-45947: Out-of-bounds Write

Wasm3 0.5.0 has an out-of-bounds write in RuntimeRelease called from EvaluateExpression and InitDataSegments...

wasm3:fuzzer: Index-out-of-bounds in Pop

Project: https://github.com/wasm3/wasm3.git Detailed Report: https://oss-fuzz.com/testcase?key=6471071226789888 Project: wasm3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzerubsanwasm3 Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: Pop...

wasm3:fuzzer: Crash in m3_FreeRuntime

Project: https://github.com/wasm3/wasm3.git Detailed Report: https://oss-fuzz.com/testcase?key=4850534369067008 Project: wasm3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzermsanwasm3 Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x000100010109 Crash State:...

wasm3:fuzzer: Crash in unsigned long fuzzer::ForEachNonZeroByte<unsigned long fuzzer::TracePC::CollectF

Detailed Report: https://oss-fuzz.com/testcase?key=5923832070799360 Project: wasm3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzerubsanwasm3 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000009f7725f Crash State: unsigned long fuzzer::ForEachNonZeroByteunsigned lo...

wasm3:fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4817025503985664 Project: wasm3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzerubsanwasm3 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000002f20138 Crash State: NULL Sanitizer: undefined UBSAN Recommended Securit...