CVE-2024-35422

vmir e8117 was discovered to contain a heap buffer overflow via the wasmcall function at /src/vmirwasmparser.c...

PYSEC-2024-306

wasm3 139076a contains a Use-After-Free in ForEachModule...

AZL-52586 CVE-2024-27532 affecting package fluent-bit for versions less than 3.1.9-2

wasm-micro-runtime aka WebAssembly Micro Runtime or WAMR 06df58f is vulnerable to NULL Pointer Dereference in function blocktypegetresulttypes...

CVE-2024-35410

wac commit 385e1 was discovered to contain a heap overflow via the interpret function at /wac-asan/wa.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted wasm file...

CVE-2024-27532

wasm-micro-runtime aka WebAssembly Micro Runtime or WAMR 06df58f is vulnerable to NULL Pointer Dereference in function blocktypegetresulttypes...

AZL-53187 CVE-2024-25431 affecting package fluent-bit for versions less than 2.2.3-5

An issue in bytecodealliance wasm-micro-runtime before v.b3f728c and fixed in commit 06df58f allows a remote attacker to escalate privileges via a crafted file to the checkwasabicompatibility function...

CVE-2024-27532

wasm-micro-runtime aka WebAssembly Micro Runtime or WAMR 06df58f is vulnerable to NULL Pointer Dereference in function blocktypegetresulttypes...

CVE-2024-27532

wasm-micro-runtime aka WebAssembly Micro Runtime or WAMR 06df58f is vulnerable to NULL Pointer Dereference in function blocktypegetresulttypes...

WAC security vulnerabilities

wac WebAssembly in C is a minimal WebAssembly interpreter written in C by the individual developer Joel Martin. A security vulnerability exists in wac version 385e1, which stems from the presence of a heap overflow...

WAC security vulnerabilities

wac WebAssembly in C is a minimal WebAssembly interpreter written in C by the individual developer Joel Martin. A security vulnerability exists in wac version 385e1, which stems from a heap overflow in the loadmodule function and could lead to an attacker causing a denial of service via a special...

VMIR security vulnerabilities

VMIR is a standalone library written in C by the individual developer Andreas Smas. A security vulnerability exists in VMIR version e8117, which stems from a heap buffer overflow in the wasmparsesectionfunctions function...

WAC security vulnerabilities

wac WebAssembly in C is a minimal WebAssembly interpreter written in C by the individual developer Joel Martin. A security vulnerability exists in wac version 385e1, which stems from a heap overflow in the setupcall function and could lead to an attacker causing a denial of service via a speciall...

WAC security vulnerabilities

wac WebAssembly in C is a minimal WebAssembly interpreter written in C by the individual developer Joel Martin. A security vulnerability exists in version 385e1 of wac, which stems from a heap overflow in the interpret function and could lead to an attacker causing a denial of service via a...

Wasm3 security vulnerabilities

Wasm3 is a fast WebAssembly interpreter and the most versatile WASM runtime from the Wasm3 open source. A security vulnerability exists in Wasm3 version 139076a that stems from vulnerability to denial of service attacks...

WebAssembly Micro Runtime security vulnerabilities

WebAssembly Micro Runtime WAMR is a lightweight, standalone WebAssembly runtime open-sourced by the Bytecode Alliance. With a small footprint, high performance, and highly configurable features for applications ranging from embedded, IoT, and edge to Trusted Execution Environments TEEs, smart...

WebAssembly Micro Runtime security vulnerabilities

WebAssembly Micro Runtime WAMR is a lightweight, standalone WebAssembly runtime open-sourced by the Bytecode Alliance. With a small footprint, high performance, and highly configurable features for applications ranging from embedded, IoT, and edge to Trusted Execution Environments TEEs, smart...

PT-2024-26495 · Vmir · Vmir

Name of the Vulnerable Software and Affected Versions: vmir version e8117 Description: A stack overflow issue was discovered in the init local vars function at /src/vmir wasm parser.c. This issue affects the vmir software, allowing for potential exploitation. Recommendations: For version e8117,...

PT-2024-21938 · Unknown · Wasm-Micro-Runtime

Name of the Vulnerable Software and Affected Versions: wasm-micro-runtime aka WebAssembly Micro Runtime or WAMR version 06df58f Description: The issue is related to a NULL Pointer Dereference in the function block type get result types. This indicates a problem where the code attempts to access...

CVE-2024-27532

wasm-micro-runtime aka WebAssembly Micro Runtime or WAMR 06df58f is vulnerable to NULL Pointer Dereference in function blocktypegetresulttypes...

WebAssembly Module Code Execution

The vulnerability of the WebAssembly module of Google Chrome browser is related to type conversion errors. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...