wasmer:universal_llvm: Stack-buffer-overflow in wasmer_vm_memory32_grow

Detailed Report: https://oss-fuzz.com/testcase?key=5686748306014208 Project: wasmer Fuzzing Engine: libFuzzer Fuzz Target: universalllvm Job Type: libfuzzerasanwasmer Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 8 Crash Address: 0x77e629c9dc70 Crash State: wasmervmmemory32grow...

wasmer:universal_llvm: Crash in universal_llvm

Detailed Report: https://oss-fuzz.com/testcase?key=5114350968045568 Project: wasmer Fuzzing Engine: libFuzzer Fuzz Target: universalllvm Job Type: libfuzzerasanwasmer Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x75b248d85fdb Crash State: universalllvm Sanitizer: address ASAN...

wasmer:universal_llvm: Stack-buffer-overflow in wasmer_vm_raise_trap

Detailed Report: https://oss-fuzz.com/testcase?key=6521474956722176 Project: wasmer Fuzzing Engine: libFuzzer Fuzz Target: universalllvm Job Type: libfuzzerasanwasmer Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x79da701adca8 Crash State: wasmervmraisetrap Sanitizer:...

wasmer:universal_llvm: Crash in universal_llvm

Project: https://github.com/wasmerio/wasmer.git Detailed Report: https://oss-fuzz.com/testcase?key=6305346162589696 Project: wasmer Fuzzing Engine: libFuzzer Fuzz Target: universalllvm Job Type: libfuzzerasanwasmer Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x77a569afb53d Crash...

wasmer:universal_cranelift: Crash in universal_cranelift

Detailed Report: https://oss-fuzz.com/testcase?key=5537793765081088 Project: wasmer Fuzzing Engine: libFuzzer Fuzz Target: universalcranelift Job Type: libfuzzerasanwasmer Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x790930aa805c Crash State: universalcranelift Sanitizer: address...

wasmer:universal_llvm: Stack-buffer-overflow in wasmer_vm_memory32_grow

Project: https://github.com/wasmerio/wasmer.git Detailed Report: https://oss-fuzz.com/testcase?key=4951915732729856 Project: wasmer Fuzzing Engine: libFuzzer Fuzz Target: universalllvm Job Type: libfuzzerasanwasmer Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 8 Crash Address:...

wasmer:universal_singlepass: Crash in universal_singlepass

Detailed Report: https://oss-fuzz.com/testcase?key=6015729068736512 Project: wasmer Fuzzing Engine: libFuzzer Fuzz Target: universalsinglepass Job Type: libfuzzerasanwasmer Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x740e7606e07f Crash State: universalsinglepass Sanitizer: addres...

wasmer:metering: Crash in metering

Detailed Report: https://oss-fuzz.com/testcase?key=5621861039013888 Project: wasmer Fuzzing Engine: libFuzzer Fuzz Target: metering Job Type: libfuzzerasanwasmer Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x76efad3ae001 Crash State: metering Sanitizer: address ASAN Recommended...

wasmer:universal_singlepass: Stack-buffer-overflow in wasmer_vm::trap::traphandlers::raise_lib_trap

Detailed Report: https://oss-fuzz.com/testcase?key=5117047762911232 Project: wasmer Fuzzing Engine: libFuzzer Fuzz Target: universalsinglepass Job Type: libfuzzerasanwasmer Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7a30876adc08 Crash State:...

wasmer:universal_llvm: Crash in __register_frame_info_bases

Project: https://github.com/wasmerio/wasmer.git Detailed Report: https://oss-fuzz.com/testcase?key=5762410129719296 Project: wasmer Fuzzing Engine: libFuzzer Fuzz Target: universalllvm Job Type: libfuzzerasanwasmer Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7c6384e083aa Crash...

CVE-2023-51661

Wasmer is a WebAssembly runtime that enables containers to run anywhere: from Desktop to the Cloud, Edge and even the browser. Wasm programs can access the filesystem outside of the sandbox. Service providers running untrusted Wasm code on Wasmer can unexpectedly expose the host filesystem. This...

Malicious code in wasmer-term (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e66b8e03768b197df9ac09bcb9d0dc5b58d3bf49ea8d2474649c6aad97e9f18e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1262 Malicious code in wasmer-term (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e66b8e03768b197df9ac09bcb9d0dc5b58d3bf49ea8d2474649c6aad97e9f18e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-38358 vulnerabilities

Vulnerabilities for packages: wasmer, zellij...

CVE-2024-38358 vulnerabilities

Vulnerabilities for packages: wasmer, zellij...

CVE-2024-38358

Wasmer is a web assembly wasm Runtime supporting WASIX, WASI and Emscripten. If the preopened directory has a symlink pointing outside, WASI programs can traverse the symlink and access host filesystem if the caller sets both oflags::creat and rights::fdwrite. Programs can also crash the runtime ...

CVE-2024-38358 Symlink bypasses filesystem sandbox in wasmer

Wasmer is a web assembly wasm Runtime supporting WASIX, WASI and Emscripten. If the preopened directory has a symlink pointing outside, WASI programs can traverse the symlink and access host filesystem if the caller sets both oflags::creat and rights::fdwrite. Programs can also crash the runtime ...

CVE-2024-38358 Symlink bypasses filesystem sandbox in wasmer

Wasmer is a web assembly wasm Runtime supporting WASIX, WASI and Emscripten. If the preopened directory has a symlink pointing outside, WASI programs can traverse the symlink and access host filesystem if the caller sets both oflags::creat and rights::fdwrite. Programs can also crash the runtime ...

CVE-2024-38358

Wasmer (a WASM runtime) is affected by CVE-2024-38358 due to a bug where preopened directories containing a symlink pointing outside can be exploited to traverse the symlink and access the host filesystem if the caller uses both oflags::creat and rights::fd_write. The issue can also crash the run...

CVE-2024-38358

Wasmer is a web assembly wasm Runtime supporting WASIX, WASI and Emscripten. If the preopened directory has a symlink pointing outside, WASI programs can traverse the symlink and access host filesystem if the caller sets both oflags::creat and rights::fdwrite. Programs can also crash the runtime ...