CVE-2022-43282: Out-of-bounds Read

wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallIndirectExpr-GetReturnCallDropKeepCount...

PT-2022-26827 · Unknown +1 · Wasm-Interp +1

Name of the Vulnerable Software and Affected Versions: wasm-interp version 1.0.29 Description: A heap overflow issue was discovered in the std::vector component, specifically via std::vector::size at /bits/stl vector.h. Recommendations: For version 1.0.29, consider updating to a newer version tha...

CVE-2022-43280

wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallExpr-GetReturnCallDropKeepCount...

CVE-2022-43281

wasm-interp v1.0.29 was discovered to contain a heap overflow via the component std::vector::size at /bits/stlvector.h...

CVE-2022-43282

wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallIndirectExpr-GetReturnCallDropKeepCount...

CVE-2022-43280: Out-of-bounds Read

wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallExpr-GetReturnCallDropKeepCount...

CVE-2022-43281: Out-of-bounds Write

wasm-interp v1.0.29 was discovered to contain a heap overflow via the component std::vector ::size at /bits/stlvector.h...

CVE-2022-43281

wasm-interp v1.0.29 was discovered to contain a heap overflow via the component std::vector::size at /bits/stlvector.h...

CVE-2022-43282

CVE-2022-43282 affects wasm-interp v1.0.29. The issue is an out-of-bounds read in OnReturnCallIndirectExpr->GetReturnCallDropKeepCount. Impact is high as per CVSS metrics (local access, user interaction required). PT-Security notes the issue and provides a workaround: restrict access to the On...

CVE-2022-43280

wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallExpr-GetReturnCallDropKeepCount...

CVE-2022-43280

wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallExpr-GetReturnCallDropKeepCount...

CVE-2022-43281

wasm-interp v1.0.29 was discovered to contain a heap overflow via the component std::vector::size at /bits/stlvector.h...

CVE-2022-43281

The CVE-2022-43281 entry concerns wasm-interp v1.0.29, which is reported to have a heap overflow in the vector implementation: std::vector::size() as implemented in /bits/stl_vector.h. According to the primary description, this vulnerability is characterized with high impact (C, I, A) and a local...

CVE-2022-43280

CVE-2022-43280 affects wasm-interp v1.0.29 and is due to an out-of-bounds read in OnReturnCallExpr->GetReturnCallDropKeepCount. Impact per sources is HIGH (confidentiality and availability), with local attack vector and user interaction required. Public details across connected documents confi...

MAL-2022-7045 Malicious code in wasm-ion-schema-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c16eba09da01fa54cb0a3ea2a06b80a6afbcc2368cc8acfc2cc08052bc045cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wasm-ion-schema-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c16eba09da01fa54cb0a3ea2a06b80a6afbcc2368cc8acfc2cc08052bc045cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Denial Of Service (DoS)

firefox is vulnerable to denial of service. The vulnerability exists due to data cache when creating wasm code which allows an attacker to cause an application crash via a malicious input...

RUSTSEC-2022-0061 Crate `parity-wasm` deprecated by the author

This PR explicitly deprecates parity-wasm. The author recommends switching to wasm-tools...

addr2line (0.7.0), aether (>=0.0.1, <=0.0.3) +358 more potentially affected by unknown CVE via parity-wasm (>=0.17.0, <=0.45.0)

parity-wasm CARGO version =0.17.0, =0.0.1, =0.1.0, =0.26.1, =0.3.10, =0.0.1, =0.0.0, =0.0.1, =0.1.0, =0.4.1, =0.1.0, =0.2.0, =0.4.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0061...

Crate `parity-wasm` deprecated by the author

This PR explicitly deprecates parity-wasm. The author recommends switching to wasm-tools...