CVE-2024-35423

vmir e8117 was discovered to contain a heap buffer overflow via the wasmparsesectionfunctions function at /src/vmirwasmparser.c...

CVE-2024-35418

wac commit 385e1 was discovered to contain a heap overflow via the setupcall function at /wac-asan/wa.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted wasm file...

CVE-2024-35410

wac commit 385e1 was discovered to contain a heap overflow via the interpret function at /wac-asan/wa.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted wasm file...

CVE-2024-35418

wac commit 385e1 was discovered to contain a heap overflow via the setupcall function at /wac-asan/wa.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted wasm file...

CVE-2024-35419

wac commit 385e1 was discovered to contain a heap overflow via the loadmodule function at /wac-asan/wa.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted wasm file...

AZL-52557 CVE-2024-27532 affecting package fluent-bit for versions less than 2.2.3-6

wasm-micro-runtime aka WebAssembly Micro Runtime or WAMR 06df58f is vulnerable to NULL Pointer Dereference in function blocktypegetresulttypes...

PYSEC-2024-304

wasm3 139076a suffers from Invalid Memory Read, leading to DoS and potential Code Execution...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read due to an invalid memory read operation. Remediation There is no fixed version for pywasm3. References - GitHub Gist - GitHub Issue Credit: Ziyi Guo...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference through the blocktypegetresulttypes function. Remediation Upgrade wasm-micro-runtime to version 2.2.0 or higher. References - GitHub Commit - GitHub Gist - GitHub Issue Credit: Ziyi Guo...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS due to improper handling in the Readutf8 function. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended and legitimate users. Unlike other...

Improper Privilege Management

Overview Affected versions of this package are vulnerable to Improper Privilege Management via the checkwasabicompatibility function. Remediation There is no fixed version for wasm-micro-runtime. References - GitHub Commit - GitHub Gist - GitHub Issue - GitHub PR Credit: Ziyi Guo...

AZL-53175 CVE-2024-25431 affecting package fluent-bit for versions less than 3.1.9-1

An issue in bytecodealliance wasm-micro-runtime before v.b3f728c and fixed in commit 06df58f allows a remote attacker to escalate privileges via a crafted file to the checkwasabicompatibility function...

CVE-2024-25431

An issue in bytecodealliance wasm-micro-runtime before v.b3f728c and fixed in commit 06df58f allows a remote attacker to escalate privileges via a crafted file to the checkwasabicompatibility function...

PT-2024-26490 · Vmir · Vmir

Name of the Vulnerable Software and Affected Versions: vmir version e8117 Description: A segmentation violation issue was discovered in vmir via the wasm parse block function at /src/vmir wasm parser.c. This issue occurs due to a problem in the wasm parse block function, which can cause a...

VMIR 安全漏洞

VMIR is a standalone library written in C by the individual developer Andreas Smas. A security vulnerability exists in VMIR version e8117, which stems from a segmentation violation in the wasmparseblock function...

CVE-2024-25431: Out-of-bounds Read

An issue in bytecodealliance wasm-micro-runtime before v.b3f728c and fixed in commit 06df58f allows a remote attacker to escalate privileges via a crafted file to the checkwasabicompatibility function...

CVE-2024-35418: Buffer Copy without Checking Size of Input

wac commit 385e1 was discovered to contain a heap overflow via the setupcall function at /wac-asan/wa.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted wasm file...

CVE-2024-25431

An issue in bytecodealliance wasm-micro-runtime before v.b3f728c and fixed in commit 06df58f allows a remote attacker to escalate privileges via a crafted file to the checkwasabicompatibility function...

CVE-2024-35419

The wac (WebAssembly in C) interpreter, specifically version 385e1 , contains a heap overflow vulnerability in the load_module function located at /wac-asan/wa.c. An attacker can exploit this by providing a specially crafted wasm file to cause a Denial of Service (DoS) . As a temporary workaround...

CVE-2024-35424

The standalone C library vmir version e8117 contains a segmentation violation vulnerability within the import_function function located at /src/vmir_wasm_parser.c. This issue is categorized as an improper check for unusual or exceptional conditions (CWE-754). The vulnerability can lead to a high ...