PT-2022-26827 · Unknown +1 · Wasm-Interp +1

Name of the Vulnerable Software and Affected Versions: wasm-interp version 1.0.29 Description: A heap overflow issue was discovered in the std::vector component, specifically via std::vector::size at /bits/stl vector.h. Recommendations: For version 1.0.29, consider updating to a newer version tha...

CVE-2022-43281

wasm-interp v1.0.29 was discovered to contain a heap overflow via the component std::vector::size at /bits/stlvector.h...

CVE-2022-43280

wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallExpr-GetReturnCallDropKeepCount...

CVE-2022-43280

CVE-2022-43280 affects wasm-interp v1.0.29 and is due to an out-of-bounds read in OnReturnCallExpr->GetReturnCallDropKeepCount. Impact per sources is HIGH (confidentiality and availability), with local attack vector and user interaction required. Public details across connected documents confi...

CVE-2022-43280

wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallExpr-GetReturnCallDropKeepCount...

CVE-2022-43281

wasm-interp v1.0.29 was discovered to contain a heap overflow via the component std::vector::size at /bits/stlvector.h...

CVE-2022-43282

wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallIndirectExpr-GetReturnCallDropKeepCount...

WABT 缓冲区错误漏洞

WABT is a WebAssembly binary toolkit open-sourced by WebAssembly. A security vulnerability exists in WABT wasm-interp version 1.0.29, which stems from an out-of-bounds read problem in the component OnReturnCallExpr-GetReturnCallDropKeepCount...

CVE-2022-43282

wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallIndirectExpr-GetReturnCallDropKeepCount...

CVE-2022-43280

wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallExpr-GetReturnCallDropKeepCount...

CVE-2022-43282

CVE-2022-43282 affects wasm-interp v1.0.29. The issue is an out-of-bounds read in OnReturnCallIndirectExpr->GetReturnCallDropKeepCount. Impact is high as per CVSS metrics (local access, user interaction required). PT-Security notes the issue and provides a workaround: restrict access to the On...

CVE-2022-43281: Out-of-bounds Write

wasm-interp v1.0.29 was discovered to contain a heap overflow via the component std::vector ::size at /bits/stlvector.h...

CVE-2022-43282: Out-of-bounds Read

wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallIndirectExpr-GetReturnCallDropKeepCount...

CVE-2022-43281

wasm-interp v1.0.29 was discovered to contain a heap overflow via the component std::vector::size at /bits/stlvector.h...

CVE-2022-43282

wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallIndirectExpr-GetReturnCallDropKeepCount...

CVE-2022-43281

wasm-interp v1.0.29 was discovered to contain a heap overflow via the component std::vector::size at /bits/stlvector.h...

CVE-2022-43281

wasm-interp v1.0.29 was discovered to contain a heap overflow via the component std::vector::size at /bits/stlvector.h...

CVE-2022-43280

wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallExpr-GetReturnCallDropKeepCount...

CVE-2022-43280: Out-of-bounds Read

wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallExpr-GetReturnCallDropKeepCount...

CVE-2022-43281

The CVE-2022-43281 entry concerns wasm-interp v1.0.29, which is reported to have a heap overflow in the vector implementation: std::vector::size() as implemented in /bits/stl_vector.h. According to the primary description, this vulnerability is characterized with high impact (C, I, A) and a local...