192 matches found
CVE-2024-47763
The CVE-2024-47763 issue affects Wasmtime’s WebAssembly runtime, where tail-call support combined with stack traces can trigger a crash. Root cause: when a WebAssembly function uses return_call/return_call_indirect/return_call_ref to a host function that captures a stack trace, the stack-walking ...
CVE-2024-47763 Wasmtime runtime crash when combining tail calls with trapping imports
Wasmtime is an open source runtime for WebAssembly. Wasmtime's implementation of WebAssembly tail calls combined with stack traces can result in a runtime crash in certain WebAssembly modules. The runtime crash may be undefined behavior if Wasmtime was compiled with Rust 1.80 or prior. The runtim...
Runtime crash when combining tail calls with stack traces
This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-q8hx-mm92-4wvg. For more information see the GitHub-hosted security advisory...
RUSTSEC-2024-0440 Runtime crash when combining tail calls with stack traces
This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-q8hx-mm92-4wvg. For more information see the GitHub-hosted security advisory...
PT-2024-32801
Name of the Vulnerable Software and Affected Versions Wasmtime versions 21.0.0 through 21.0.1 Wasmtime versions 22.0.0 through 22.0.0 Wasmtime versions 23.0.0 through 23.0.2 Wasmtime versions 24.0.0 through 24.0.0 Wasmtime versions 25.0.0 through 25.0.1 Description The issue is related to...
GHSA-55F3-3QVG-8PV5 Symlink bypasses filesystem sandbox
Summary If the preopened directory has a symlink pointing outside, WASI programs can traverse the symlink and access host filesystem if the caller sets both oflags::creat and rights::fdwrite. Programs can also crash the runtime by creating a symlink pointing outside with pathsymlink and pathopeni...
Symlink bypasses filesystem sandbox
Summary If the preopened directory has a symlink pointing outside, WASI programs can traverse the symlink and access host filesystem if the caller sets both oflags::creat and rights::fdwrite. Programs can also crash the runtime by creating a symlink pointing outside with pathsymlink and pathopeni...
Denial Of Service
paddlepaddle is vulnerable to Denial Of Service DoS. The vulnerability is caused due to a nullptr exception in paddle.putalongaxis. The attacker can trigger a runtime crash which would result to DoS...
Denial Of Service
PaddlePaddle is vulnerable to Denial Of Service. The vulnerability is due to a nullptr exception in paddle.dot. This can cause a runtime crash resulting in Denial of Service...
Denial Of Service (DoS)
PaddlePaddle is vulnerable to Denial Of Service DoS. The vulnerability is caused due to floating point exception within the paddle.lerp function, which may cause a runtime crash and Denial Of Service DoS...
Denial Of Service (DoS)
PaddlePaddle is vulnerable to Denial Of Service DoS. The vulnerability is due to improper checks in the paddle.nextafter function, which may cause a runtime crash resulting in Denial of Service DoS...
GHSA-275C-W5MQ-V5M2 PaddlePaddle floating point exception in paddle.argmin and paddle.argmax
FPE in paddle.argmin and paddle.argmax in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service...
PaddlePaddle floating point exception in paddle.topk
FPE in paddle.topk in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service...
GHSA-RG9Q-M8HV-XXR6 PaddlePaddle floating point exception in paddle.lerp
FPE in paddle.lerp in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service...
PaddlePaddle null pointer dereference in paddle.nextafter
Nullptr in paddle.nextafter in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service...
PaddlePaddle floating point exception in paddle.linalg.eig
FPE in paddle.linalg.eig in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service...
PaddlePaddle segfault in paddle.dot
Nullptr in paddle.dot in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service...
PaddlePaddle floating point exception in paddle.linalg.matrix_rank
FPE in paddle.linalg.matrixrank in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service...
