WebAssembly 安全漏洞

WebAssembly is a binary instruction format for stack-based virtual machines from WebAssembly. A security vulnerability exists in WebAssembly version v1.0.29 that stems from the presence of a segmentation error vulnerability...

PT-2023-20961 · Unknown +1 · Webassembly +1

Name of the Vulnerable Software and Affected Versions: WebAssembly version 1.0.29 Description: A segmentation fault was discovered in WebAssembly via the component wabt::cat compute size. Recommendations: For version 1.0.29, at the moment, there is no information about a newer version that contai...

CVE-2023-27116

WebAssembly v1.0.29 discovered to contain an abort in CWriter::MangleType...

CVE-2023-27115

CVE-2023-27115 concerns WebAssembly v1.0.29, where a segmentation fault was found in the component wabt::cat_compute_size. The issue, described in the CVE entry and corroborated by multiple feeds, indicates a fault in WebAssembly v1.0.29 that can affect availability. The CVSS 3.1 vector (AV:L, AC...

CVE-2023-27117

CVE-2023-27117 affects WebAssembly v1.0.29, with a heap overflow in wabt::Node::operator. The vulnerability is tied to WebAssembly’s wabt component; isolation and exploitation details in the provided documents are limited, but there is an explicit remediation note to update to a newer version tha...

CVE-2023-27115

WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::catcomputesize...

PT-2023-20963 · Unknown +1 · Webassembly +1

Name of the Vulnerable Software and Affected Versions: WebAssembly version 1.0.29 Description: A heap overflow issue was discovered in WebAssembly via the wabt::Node::operator component. Recommendations: For version 1.0.29, update to a newer version that contains a fix for this issue...

CVE-2023-27117

WebAssembly v1.0.29 was discovered to contain a heap overflow via the component component wabt::Node::operator...

CVE-2023-27119

WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::Decompiler::WrapChild...

PT-2023-20964 · Unknown +1 · Webassembly +1

Name of the Vulnerable Software and Affected Versions: WebAssembly version 1.0.29 Description: A segmentation fault was discovered in WebAssembly via the component wabt::Decompiler::WrapChild. Recommendations: For version 1.0.29, update to a newer version that contains a fix for this issue...

CVE-2023-27119

WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::Decompiler::WrapChild...

CVE-2023-27117

WebAssembly v1.0.29 was discovered to contain a heap overflow via the component component wabt::Node::operator...

WebAssembly 缓冲区错误漏洞

WebAssembly is a binary instruction format for stack-based virtual machines from WebAssembly. A security vulnerability exists in WebAssembly version v1.0.29 that stems from the presence of a heap overflow vulnerability...

CVE-2023-27116

WebAssembly v1.0.29 discovered to contain an abort in CWriter::MangleType...

CVE-2023-27119

WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::Decompiler::WrapChild...

WebAssembly 安全漏洞

WebAssembly is a binary instruction format for stack-based virtual machines from WebAssembly. A security vulnerability exists in WebAssembly version v1.0.29 that stems from the presence of an abort error...

CVE-2023-27119

CVE-2023-27119 : WebAssembly v1.0.29 contains a segmentation fault via the component wabt::Decompiler::WrapChild. Affects the WebAssembly toolchain; vulnerable code path can be triggered locally with user interaction, with availability impact listed as HIGH. No remediation or patch details are pr...

CVE-2023-27116

WebAssembly v1.0.29 discovered to contain an abort in CWriter::MangleType...

CVE-2023-27115

WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::catcomputesize...

wasmtime vulnerable to miscompilation of `i8x16.select` with the same inputs on x86_64

Impact Wasmtime's code generation backend, Cranelift, has a bug on x8664 platforms for the WebAssembly i8x16.select instruction which will produce the wrong results when the same operand is provided to the instruction and some of the selected indices are greater than 16. There is an off-by-one...