hotg-rune-runtime (>=0.11.0, <=0.11.3), hotg-rune-wasm3-runtime (>=0.6.0, <=0.10.0) +7 more potentially affected by CVE-2022-34529 via wasm3 (>=0.1.3, <=0.3.1)

wasm3 CARGO version =0.1.3, =0.11.0, =0.6.0, =0.7.0, =0.4.0, =0.2.0, =0.0.1, =0.16.0, =0.15.0, =0.19.0 Source cves: CVE-2022-34529 Source advisory: OSV:GHSA-GQ4P-4HXV-5RG9...

CVE-2022-34502

Radare2 v5.7.0 was discovered to contain a heap buffer overflow via the function consumeencodednamenew at format/wasm/wasm.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted binary file...

CVE-2022-34502

Radare2 v5.7.0 was discovered to contain a heap buffer overflow via the function consumeencodednamenew at format/wasm/wasm.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted binary file...

Heap overflow

Radare2 v5.7.0 was discovered to contain a heap buffer overflow via the function consumeencodednamenew at format/wasm/wasm.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted binary file...

CVE-2022-34502

Radare2 v5.7.0 was discovered to contain a heap buffer overflow via the function consumeencodednamenew at format/wasm/wasm.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted binary file...

CVE-2022-34502

CVE-2022-34502 affects Radare2 v5.7.0. The vulnerability is a heap buffer overflow in the function consume_encoded_name_new within format/wasm/wasm.c , enabling a Denial of Service when processing a crafted binary file. All connected documents consistently describe the same root cause and impact ...

CVE-2022-34502

Radare2 v5.7.0 was discovered to contain a heap buffer overflow via the function consumeencodednamenew at format/wasm/wasm.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted binary file...

CVE-2022-34502: Out-of-bounds Write

Radare2 v5.7.0 was discovered to contain a heap buffer overflow via the function consumeencodednamenew at format/wasm/wasm.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted binary file...

PT-2022-22184

Name of the Vulnerable Software and Affected Versions Radare2 version v5.7.0 Description The issue is related to a heap buffer overflow via the consume encoded name new function in the format/wasm/wasm.c file. This allows attackers to cause a Denial of Service DoS via a crafted binary file...

PT-2022-37097

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-use-after-free READ 8 crash has been reported. The crash state includes references to .tmpoLlNv4 and wasmtime setjmp, indicating a potential issue...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Thunderbird vulnerabilities (USN-5512-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5512-1 advisory. Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a...

auto-wasi (0.1.0), ceres-executor (>=0.1.0, <=0.2.0) +82 more potentially affected by CVE-2022-31146 via wasmtime (>=0.7.0, <=0.37.0)

wasmtime CARGO version =0.7.0, =0.1.0, =0.1.1, =0.5.3-0, =0.4.0-pre, =0.4.0-pre, =0.0.0, =0.40.1, =0.45.0, =0.10.0, =0.1.0, =0.1.0, =0.3.0 - inkpad-executor 0.1.0 and more Source cves: CVE-2022-31146 Source advisory: OSV:RUSTSEC-2022-0100...

Oracle Linux 9 : thunderbird (ELSA-2022-4892)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-4892 advisory. 91.10.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Reference oracle-indexhtml within Requires...

auto-wasi (0.1.0), ceres-executor (>=0.1.0, <=0.2.0) +82 more potentially affected by CVE-2022-31104 via wasmtime (>=0.7.0, <=0.37.0)

wasmtime CARGO version =0.7.0, =0.1.0, =0.1.1, =0.5.3-0, =0.4.0-pre, =0.4.0-pre, =0.0.0, =0.40.1, =0.45.0, =0.10.0, =0.1.0, =0.1.0, =0.3.0 - inkpad-executor 0.1.0 and more Source cves: CVE-2022-31104 Source advisory: OSV:GHSA-JQWC-C49R-4W2X...

CVE-2022-31104 Miscompilation of `i8x16.swizzle` and `select` with v128 inputs in Wasmtime

Wasmtime is a standalone runtime for WebAssembly. In affected versions wasmtime's implementation of the SIMD proposal for WebAssembly on x8664 contained two distinct bugs in the instruction lowerings implemented in Cranelift. The aarch64 implementation of the simd proposal is not affected. The bu...

Ubuntu 22.04 LTS : SpiderMonkey JavaScript Library vulnerabilities (USN-5494-1)

The remote Ubuntu 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5494-1 advisory. It was discovered that SpiderMonkey JavaScript Library incorrectly generated certain assembly code. An remote attacker could possibly use this issue to...

Malicious Package

Overview wasm-bindgen is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

MAL-2022-2458 Malicious code in devtools-wasm-dwarf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ffcce82ba8d1064613c9aa2e086893c61faca2bb8b2c3b9dd5a1fbff4c79f653 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in devtools-wasm-dwarf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ffcce82ba8d1064613c9aa2e086893c61faca2bb8b2c3b9dd5a1fbff4c79f653 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5463 Malicious code in private-identity-audit-wasm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b1bd9d874421f920c2d168c65c29f9f4cfd20aebdd77c6fdbfd8e4e0935a778 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...