CVE-2024-35419

wac commit 385e1 was discovered to contain a heap overflow via the loadmodule function at /wac-asan/wa.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted wasm file...

CVE-2024-25431

An issue in bytecodealliance wasm-micro-runtime before v.b3f728c and fixed in commit 06df58f allows a remote attacker to escalate privileges via a crafted file to the checkwasabicompatibility function...

CVE-2024-35419

wac commit 385e1 was discovered to contain a heap overflow via the loadmodule function at /wac-asan/wa.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted wasm file...

CVE-2024-35418

wac commit 385e1 was discovered to contain a heap overflow via the setupcall function at /wac-asan/wa.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted wasm file...

CVE-2024-35410

wac commit 385e1 was discovered to contain a heap overflow via the interpret function at /wac-asan/wa.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted wasm file...

CVE-2024-35424

vmir e8117 was discovered to contain a segmentation violation via the importfunction function at /src/vmirwasmparser.c...

CVE-2024-35410

The wac (WebAssembly in C) interpreter, specifically commit 385e1 , contains a heap overflow vulnerability in the interpret function located at /wac-asan/wa.c. An attacker can leverage this flaw by providing a crafted wasm file to trigger a Denial of Service (DoS) . As a temporary workaround, it ...

CVE-2024-27532

The wasm-micro-runtime (also known as WebAssembly Micro Runtime or WAMR) is vulnerable to a NULL Pointer Dereference within the block_type_get_result_types function. This vulnerability affects various environments, including Azure Linux 3.0 and CBL Mariner hosts. Specifically, the fluent-bit pack...

CVE-2024-35424

The standalone C library vmir version e8117 contains a segmentation violation vulnerability within the import_function function located at /src/vmir_wasm_parser.c. This issue is categorized as an improper check for unusual or exceptional conditions (CWE-754). The vulnerability can lead to a high ...

CVE-2024-35418

The wac (WebAssembly in C) interpreter, specifically commit 385e1 , is vulnerable to a heap overflow within the setup_call function located at /wac-asan/wa.c. An attacker can exploit this flaw by providing a crafted wasm file to trigger a Denial of Service (DoS) . As a temporary workaround, users...

CVE-2024-35419

The wac (WebAssembly in C) interpreter, specifically version 385e1 , contains a heap overflow vulnerability in the load_module function located at /wac-asan/wa.c. An attacker can exploit this by providing a specially crafted wasm file to cause a Denial of Service (DoS) . As a temporary workaround...

CVE-2024-35419

wac commit 385e1 was discovered to contain a heap overflow via the loadmodule function at /wac-asan/wa.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted wasm file...

CVE-2024-35418

wac commit 385e1 was discovered to contain a heap overflow via the setupcall function at /wac-asan/wa.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted wasm file...

CVE-2024-35410

wac commit 385e1 was discovered to contain a heap overflow via the interpret function at /wac-asan/wa.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted wasm file...

CVE-2024-27532

wasm-micro-runtime aka WebAssembly Micro Runtime or WAMR 06df58f is vulnerable to NULL Pointer Dereference in function blocktypegetresulttypes...

PT-2024-26486 · Wac · Wac

Name of the Vulnerable Software and Affected Versions: wac version 385e1 Description: A heap overflow issue was discovered in the setup call function at /wac-asan/wa.c, allowing attackers to cause a Denial of Service DoS via a crafted wasm file. The issue is related to the setup call function...

PT-2024-26487 · Wac · Wac

Name of the Vulnerable Software and Affected Versions: wac version 385e1 Description: A heap overflow issue was discovered in the load module function at /wac-asan/wa.c, allowing attackers to cause a Denial of Service DoS via a crafted wasm file. The load module function is vulnerable, and...

CVE-2024-25431

CVE-2024-25431 affects the WebAssembly Micro Runtime (WAMR) from Bytecode Alliance. Pre- v.b3f728c builds are vulnerable to privilege escalation via a crafted file that targets the check_was_abi_compatibility function. The issue is mitigated by the fix introduced in commit 06df58f. Multiple conne...

CVE-2024-35410: Buffer Copy without Checking Size of Input

wac commit 385e1 was discovered to contain a heap overflow via the interpret function at /wac-asan/wa.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted wasm file...

PT-2024-26485

Name of the Vulnerable Software and Affected Versions wac version 385e1 Description A heap overflow vulnerability was discovered in the interpret function at /wac-asan/wa.c, allowing attackers to cause a Denial of Service DoS via a crafted wasm file. Recommendations For version 385e1, consider...