CVE-2022-43281

The CVE-2022-43281 entry concerns wasm-interp v1.0.29, which is reported to have a heap overflow in the vector implementation: std::vector::size() as implemented in /bits/stl_vector.h. According to the primary description, this vulnerability is characterized with high impact (C, I, A) and a local...

WABT 缓冲区错误漏洞

WABT is a WebAssembly binary toolkit open-sourced by WebAssembly. A security vulnerability exists in WABT wasm-interp version 1.0.29, which stems from an out-of-bounds read problem in the component OnReturnCallExpr-GetReturnCallDropKeepCount...

PT-2022-26828 · Unknown +1 · Wasm-Interp +1

Name of the Vulnerable Software and Affected Versions: wasm-interp version 1.0.29 Description: The issue is related to an out-of-bounds read in the OnReturnCallIndirectExpr component, specifically via the GetReturnCallDropKeepCount method. Recommendations: For version 1.0.29, consider restricting...

CVE-2022-43281

wasm-interp v1.0.29 was discovered to contain a heap overflow via the component std::vector::size at /bits/stlvector.h...

WABT 缓冲区错误漏洞

WABT is a WebAssembly binary toolkit open-sourced by WebAssembly. A security vulnerability exists in WABT wasm-interp version 1.0.29, which stems from a heap-based buffer overflow issue in /bits/stlvector.h. The vulnerability is caused by a heap-based buffer overflow issue...

CVE-2022-43281

wasm-interp v1.0.29 was discovered to contain a heap overflow via the component std::vector::size at /bits/stlvector.h...

CVE-2022-43282

wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallIndirectExpr-GetReturnCallDropKeepCount...

WABT 缓冲区错误漏洞

WABT is a WebAssembly binary toolkit open-sourced by WebAssembly. A security vulnerability exists in WABT wasm-interp version 1.0.29, which stems from an out-of-bounds read problem in the component OnReturnCallIndirectExpr-GetReturnCallDropKeepCount...

CVE-2022-43282

wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallIndirectExpr-GetReturnCallDropKeepCount...

CVE-2022-43280

wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallExpr-GetReturnCallDropKeepCount...

CVE-2022-43281

wasm-interp v1.0.29 was discovered to contain a heap overflow via the component std::vector::size at /bits/stlvector.h...

CVE-2022-43280

wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallExpr-GetReturnCallDropKeepCount...

CVE-2022-43280

CVE-2022-43280 affects wasm-interp v1.0.29 and is due to an out-of-bounds read in OnReturnCallExpr->GetReturnCallDropKeepCount. Impact per sources is HIGH (confidentiality and availability), with local attack vector and user interaction required. Public details across connected documents confi...

Malicious code in wasm-ion-schema-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c16eba09da01fa54cb0a3ea2a06b80a6afbcc2368cc8acfc2cc08052bc045cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7045 Malicious code in wasm-ion-schema-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c16eba09da01fa54cb0a3ea2a06b80a6afbcc2368cc8acfc2cc08052bc045cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Denial Of Service (DoS)

firefox is vulnerable to denial of service. The vulnerability exists due to data cache when creating wasm code which allows an attacker to cause an application crash via a malicious input...

RUSTSEC-2022-0061 Crate `parity-wasm` deprecated by the author

This PR explicitly deprecates parity-wasm. The author recommends switching to wasm-tools...

Crate `parity-wasm` deprecated by the author

This PR explicitly deprecates parity-wasm. The author recommends switching to wasm-tools...

PT-2022-37427 · Unknown · Parity-Wasm

Name of the Vulnerable Software and Affected Versions: parity-wasm affected versions not specified Description: The parity-wasm software has been explicitly deprecated. The author recommends switching to wasm-tools. Recommendations: At the moment, there is no information about a newer version tha...

Ubuntu 18.04 LTS / 20.04 LTS : Firefox vulnerabilities (USN-5649-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5649-1 advisory. Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could...