1211 matches found
CVE-2025-66627 Wasmi's Linear Memory has a Critical Use After Free Vulnerability
Wasmi is a WebAssembly interpreter focused on constrained and embedded systems. In versions 0.41.0, 0.41.1, 0.42.0 through 0.47.1, 0.50.0 through 0.51.2 and 1.0.0, Wasmi's linear memory implementation leads to a Use After Free vulnerability, triggered by a WebAssembly module under certain memory...
EUVD-2025-201826
Wasmi is a WebAssembly interpreter focused on constrained and embedded systems. In versions 0.41.0, 0.41.1, 0.42.0 through 0.47.1, 0.50.0 through 0.51.2 and 1.0.0, Wasmi's linear memory implementation leads to a Use After Free vulnerability, triggered by a WebAssembly module under certain memory...
CVE-2025-66627 Wasmi's Linear Memory has a Critical Use After Free Vulnerability
Wasmi is a WebAssembly interpreter focused on constrained and embedded systems. In versions 0.41.0, 0.41.1, 0.42.0 through 0.47.1, 0.50.0 through 0.51.2 and 1.0.0, Wasmi's linear memory implementation leads to a Use After Free vulnerability, triggered by a WebAssembly module under certain memory...
CVE-2025-66627: Use After Free
Wasmi is a WebAssembly interpreter focused on constrained and embedded systems. In versions 0.41.0, 0.41.1, 0.42.0 through 0.47.1, 0.50.0 through 0.51.2 and 1.0.0, Wasmi's linear memory implementation leads to a Use After Free vulnerability, triggered by a WebAssembly module under certain memory...
PT-2025-49777
Wasmi is a WebAssembly interpreter focused on constrained and embedded systems. In versions 0.41.0, 0.41.1, 0.42.0 through 0.47.1, 0.50.0 through 0.51.2 and 1.0.0, Wasmi's linear memory implementation leads to a Use After Free vulnerability, triggered by a WebAssembly module under certain memory...
Wasmi resource management error vulnerability
Wasmi is an open source WebAssembly interpreter for embedded systems from Wasmi Labs. A resource management error vulnerability exists in Wasmi versions 0.41.0, 0.41.1, 0.42.0 through 0.47.1, 0.50.0 through 0.51.2, and 1.0.0, which stems from a flaw in the implementation of linear memory that cou...
Critical Use-After-Free in Wasmi's Linear Memory
Summary A use-after-free vulnerability has been discovered in the linear memory implementation of Wasmi. This issue can be triggered by a WebAssembly module under certain memory growth conditions, potentially leading to memory corruption, information disclosure, or code execution. Impact -...
GHSA-G4V2-CJQP-RFMQ Critical Use-After-Free in Wasmi's Linear Memory
Summary A use-after-free vulnerability has been discovered in the linear memory implementation of Wasmi. This issue can be triggered by a WebAssembly module under certain memory growth conditions, potentially leading to memory corruption, information disclosure, or code execution. Impact -...
Decryption Thorough Polynomial Ambiguity: Noise-Enhanced High-Memory Convolutional Codes for Post-Quantum Cryptography
We present a novel approach to post-quantum cryptography that employs directed-graph decryption of noise-enhanced high-memory convolutional codes. The proposed construction generates random-like generator matrices that effectively conceal algebraic structure and resist known structural attacks...
OESA-2025-2750 golang security update
. Security Fixes: Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. This affects programs which validate arbitrary certificate chains.CVE-2025-58187 The processing time for parsing some...
Malware in react-linear-loader
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in react-linear-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccf5203f35299ba1826e76daefdfa5e28ce387072c612234ee91afa242ba8df5 The package react-linear-loader was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-199050
Malicious code in react-linear-loader npm...
MAL-2025-190993 Malicious code in react-linear-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccf5203f35299ba1826e76daefdfa5e28ce387072c612234ee91afa242ba8df5 The package react-linear-loader was found to contain malicious code. Source: ghsa-malware...
The Star Product of Uniformly Random Codes
We consider the problem of determining the expected dimension of the star product of two uniformly random linear codes that are not necessarily of the same dimension. We achieve this by establishing a correspondence between the star product and the evaluation of bilinear forms, which we use to...
[SECURITY] Fedora 41 Update: rust-regex-1.12.2-1.fc41
An implementation of regular expressions for Rust. This implementation uses finite automata and guarantees linear time matching on all inputs...
[SECURITY] Fedora 42 Update: rust-regex-1.12.2-1.fc42
An implementation of regular expressions for Rust. This implementation uses finite automata and guarantees linear time matching on all inputs...
CVE-2025-64345
Wasmtime is a runtime for WebAssembly. Prior to version 38.0.4, 37.0.3, 36.0.3, and 24.0.5, Wasmtime's Rust embedder API contains an unsound interaction where a WebAssembly shared linear memory could be viewed as a type which provides safe access to the host Rust to the contents of the linear...
Malicious code in linear-plum-cephalopod (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c818e662b2c1f0582429a212cfafdeb259044c5e9a61b528d10cd36a0bf61b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...