CVE-2022-39974

CVE-2022-39974 affects WASM3 v0.5.0. The root cause is a segmentation fault in the op_Select_i32_srs path of wasm3/source/m3_exec.h, potentially causing availability impact. Exploitation is indicated as possible via a proof-of-concept (per references noting a poc), with the CVSSv3.1 profile showi...

CVE-2022-39974

WASM3 v0.5.0 was discovered to contain a segmentation fault via the component opSelecti32srs in wasm3/source/m3exec.h...

CVE-2022-39974

WASM3 v0.5.0 was discovered to contain a segmentation fault via the component opSelecti32srs in wasm3/source/m3exec.h...

PT-2022-25150 · Wasm3 · Wasm3

Name of the Vulnerable Software and Affected Versions: WASM3 version 0.5.0 Description: The issue is related to a segmentation fault in the op Select i32 srs component located in wasm3/source/m3 exec.h. This fault can be triggered, potentially leading to a crash or other unintended behavior. No...

CVE-2022-39974: Improper Restriction of Operations within the Bounds of a Memory Buffer

WASM3 v0.5.0 was discovered to contain a segmentation fault via the component opSelecti32srs in wasm3/source/m3exec.h...

wasm3:fuzzer: Heap-use-after-free in AcquireCodePageWithCapacity

Project: https://github.com/wasm3/wasm3.git Detailed Report: https://oss-fuzz.com/testcase?key=5406300602761216 Project: wasm3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzerasanwasm3 Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x606000000030 Crash...

wasm3:fuzzer: Segv on unknown address in FreeCodePages

Project: https://github.com/wasm3/wasm3.git Detailed Report: https://oss-fuzz.com/testcase?key=6211074755526656 Project: wasm3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzermsanwasm3 Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: FreeCodePage...

WASM3 segmentation fault

WASM3 v0.5.0 was discovered to contain a segmentation fault via the component CompileMemoryCopyFill...

hotg-rune-runtime (>=0.11.0, <=0.11.3), hotg-rune-wasm3-runtime (>=0.6.0, <=0.10.0) +7 more potentially affected by CVE-2022-34529 via wasm3 (>=0.1.3, <=0.3.1)

wasm3 CARGO version =0.1.3, =0.11.0, =0.6.0, =0.7.0, =0.4.0, =0.2.0, =0.0.1, =0.16.0, =0.15.0, =0.19.0 Source cves: CVE-2022-34529 Source advisory: OSV:GHSA-GQ4P-4HXV-5RG9...

GHSA-GQ4P-4HXV-5RG9 WASM3 segmentation fault

WASM3 v0.5.0 was discovered to contain a segmentation fault via the component CompileMemoryCopyFill...

CVE-2022-34529

WASM3 v0.5.0 was discovered to contain a segmentation fault via the component CompileMemoryCopyFill...

PYSEC-2022-43057

WASM3 v0.5.0 was discovered to contain a segmentation fault via the component CompileMemoryCopyFill...

Default credentials

WASM3 v0.5.0 was discovered to contain a segmentation fault via the component CompileMemoryCopyFill...

PYSEC-2022-43057

WASM3 v0.5.0 was discovered to contain a segmentation fault via the component CompileMemoryCopyFill...

CVE-2022-34529

WASM3 v0.5.0 was discovered to contain a segmentation fault via the component CompileMemoryCopyFill...

CVE-2022-34529

WASM3 v0.5.0 was discovered to contain a segmentation fault via the component CompileMemoryCopyFill...

CVE-2022-34529

CVE-2022-34529 affects WASM3 v0.5.0, with a segmentation fault occurring in the Compile_Memory_CopyFill component. Multiple connected records (Red Hat, GHSA, OSV, NVD, etc.) corroborate a segmentation fault in this module, indicating a likely crash condition when executing memory copy/fill operat...

CVE-2022-34529

WASM3 v0.5.0 was discovered to contain a segmentation fault via the component CompileMemoryCopyFill...

CVE-2022-34529: Out-of-bounds Read

WASM3 v0.5.0 was discovered to contain a segmentation fault via the component CompileMemoryCopyFill...

PT-2022-22189 · Wasm3 · Wasm3

Name of the Vulnerable Software and Affected Versions: WASM3 version 0.5.0 Description: The issue is related to a segmentation fault in the Compile Memory CopyFill component. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents...