CVE-2024-35419

wac commit 385e1 was discovered to contain a heap overflow via the loadmodule function at /wac-asan/wa.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted wasm file...

CVE-2024-35418

wac commit 385e1 was discovered to contain a heap overflow via the setupcall function at /wac-asan/wa.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted wasm file...

CVE-2024-35424

vmir e8117 was discovered to contain a segmentation violation via the importfunction function at /src/vmirwasmparser.c...

CVE-2024-27532

The wasm-micro-runtime (also known as WebAssembly Micro Runtime or WAMR) is vulnerable to a NULL Pointer Dereference within the block_type_get_result_types function. This vulnerability affects various environments, including Azure Linux 3.0 and CBL Mariner hosts. Specifically, the fluent-bit pack...

CVE-2024-35418

The wac (WebAssembly in C) interpreter, specifically commit 385e1 , is vulnerable to a heap overflow within the setup_call function located at /wac-asan/wa.c. An attacker can exploit this flaw by providing a crafted wasm file to trigger a Denial of Service (DoS) . As a temporary workaround, users...

CVE-2024-35419

wac commit 385e1 was discovered to contain a heap overflow via the loadmodule function at /wac-asan/wa.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted wasm file...

CVE-2024-35418

wac commit 385e1 was discovered to contain a heap overflow via the setupcall function at /wac-asan/wa.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted wasm file...

CVE-2024-35410

wac commit 385e1 was discovered to contain a heap overflow via the interpret function at /wac-asan/wa.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted wasm file...

CVE-2024-27532

wasm-micro-runtime aka WebAssembly Micro Runtime or WAMR 06df58f is vulnerable to NULL Pointer Dereference in function blocktypegetresulttypes...

CVE-2024-25431

CVE-2024-25431 affects the WebAssembly Micro Runtime (WAMR) from Bytecode Alliance. Pre- v.b3f728c builds are vulnerable to privilege escalation via a crafted file that targets the check_was_abi_compatibility function. The issue is mitigated by the fix introduced in commit 06df58f. Multiple conne...

PT-2024-26485

Name of the Vulnerable Software and Affected Versions wac version 385e1 Description A heap overflow vulnerability was discovered in the interpret function at /wac-asan/wa.c, allowing attackers to cause a Denial of Service DoS via a crafted wasm file. Recommendations For version 385e1, consider...

PT-2024-26487 · Wac · Wac

Name of the Vulnerable Software and Affected Versions: wac version 385e1 Description: A heap overflow issue was discovered in the load module function at /wac-asan/wa.c, allowing attackers to cause a Denial of Service DoS via a crafted wasm file. The load module function is vulnerable, and...

PT-2024-26492 · Unknown · Vmir E8117

Name of the Vulnerable Software and Affected Versions: vmir e8117 version e8117 Description: A heap buffer overflow issue was discovered in vmir e8117 via the wasm parse section functions function at /src/vmir wasm parser.c. This issue occurs due to a heap buffer overflow, which can be exploited...

CVE-2024-35410

The wac (WebAssembly in C) interpreter, specifically commit 385e1 , contains a heap overflow vulnerability in the interpret function located at /wac-asan/wa.c. An attacker can leverage this flaw by providing a crafted wasm file to trigger a Denial of Service (DoS) . As a temporary workaround, it ...

CVE-2024-35419: Buffer Copy without Checking Size of Input

wac commit 385e1 was discovered to contain a heap overflow via the loadmodule function at /wac-asan/wa.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted wasm file...

CVE-2024-35410: Buffer Copy without Checking Size of Input

wac commit 385e1 was discovered to contain a heap overflow via the interpret function at /wac-asan/wa.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted wasm file...

PT-2024-20939 · Bytecode Alliance · Wasm-Micro-Runtime

Name of the Vulnerable Software and Affected Versions: bytecodealliance wasm-micro-runtime versions before v.b3f728c Description: The issue allows a remote attacker to escalate privileges via a crafted file to the check was abi compatibility function. Recommendations: For versions before v.b3f728...

CVE-2024-27532: NULL Pointer Dereference

wasm-micro-runtime aka WebAssembly Micro Runtime or WAMR 06df58f is vulnerable to NULL Pointer Dereference in function blocktypegetresulttypes...

PT-2024-26491 · Vmir · Vmir

Name of the Vulnerable Software and Affected Versions: vmir version e8117 Description: A heap buffer overflow issue was discovered in vmir via the wasm call function at /src/vmir wasm parser.c. This issue occurs due to a problem in the wasm call function, which can lead to a heap buffer overflow...

PT-2024-26486 · Wac · Wac

Name of the Vulnerable Software and Affected Versions: wac version 385e1 Description: A heap overflow issue was discovered in the setup call function at /wac-asan/wa.c, allowing attackers to cause a Denial of Service DoS via a crafted wasm file. The issue is related to the setup call function...