CVE-2022-43282

wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallIndirectExpr-GetReturnCallDropKeepCount...

WABT 缓冲区错误漏洞

WABT is a WebAssembly binary toolkit open-sourced by WebAssembly. A security vulnerability exists in WABT wasm-interp version 1.0.29, which stems from an out-of-bounds read problem in the component OnReturnCallIndirectExpr-GetReturnCallDropKeepCount...

CVE-2022-43282

wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallIndirectExpr-GetReturnCallDropKeepCount...

CVE-2022-43280

CVE-2022-43280 affects wasm-interp v1.0.29 and is due to an out-of-bounds read in OnReturnCallExpr->GetReturnCallDropKeepCount. Impact per sources is HIGH (confidentiality and availability), with local attack vector and user interaction required. Public details across connected documents confi...

CVE-2022-43280

wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallExpr-GetReturnCallDropKeepCount...

CVE-2022-43281

wasm-interp v1.0.29 was discovered to contain a heap overflow via the component std::vector::size at /bits/stlvector.h...

CVE-2022-43282

wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallIndirectExpr-GetReturnCallDropKeepCount...

CVE-2022-43280

wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallExpr-GetReturnCallDropKeepCount...

CVE-2022-43282

CVE-2022-43282 affects wasm-interp v1.0.29. The issue is an out-of-bounds read in OnReturnCallIndirectExpr->GetReturnCallDropKeepCount. Impact is high as per CVSS metrics (local access, user interaction required). PT-Security notes the issue and provides a workaround: restrict access to the On...

CVE-2022-43282

wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallIndirectExpr-GetReturnCallDropKeepCount...

CVE-2022-43280

wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallExpr-GetReturnCallDropKeepCount...

PT-2022-26828 · Unknown +1 · Wasm-Interp +1

Name of the Vulnerable Software and Affected Versions: wasm-interp version 1.0.29 Description: The issue is related to an out-of-bounds read in the OnReturnCallIndirectExpr component, specifically via the GetReturnCallDropKeepCount method. Recommendations: For version 1.0.29, consider restricting...

CVE-2022-43281

The CVE-2022-43281 entry concerns wasm-interp v1.0.29, which is reported to have a heap overflow in the vector implementation: std::vector::size() as implemented in /bits/stl_vector.h. According to the primary description, this vulnerability is characterized with high impact (C, I, A) and a local...

WABT 缓冲区错误漏洞

WABT is a WebAssembly binary toolkit open-sourced by WebAssembly. A security vulnerability exists in WABT wasm-interp version 1.0.29, which stems from a heap-based buffer overflow issue in /bits/stlvector.h. The vulnerability is caused by a heap-based buffer overflow issue...

PT-2022-26827 · Unknown +1 · Wasm-Interp +1

Name of the Vulnerable Software and Affected Versions: wasm-interp version 1.0.29 Description: A heap overflow issue was discovered in the std::vector component, specifically via std::vector::size at /bits/stl vector.h. Recommendations: For version 1.0.29, consider updating to a newer version tha...

CVE-2022-43281

wasm-interp v1.0.29 was discovered to contain a heap overflow via the component std::vector::size at /bits/stlvector.h...

CVE-2022-43281

wasm-interp v1.0.29 was discovered to contain a heap overflow via the component std::vector::size at /bits/stlvector.h...

CVE-2022-43281

wasm-interp v1.0.29 was discovered to contain a heap overflow via the component std::vector::size at /bits/stlvector.h...

WABT 缓冲区错误漏洞

WABT is a WebAssembly binary toolkit open-sourced by WebAssembly. A security vulnerability exists in WABT wasm-interp version 1.0.29, which stems from an out-of-bounds read problem in the component OnReturnCallExpr-GetReturnCallDropKeepCount...

Malicious code in wasm-ion-schema-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c16eba09da01fa54cb0a3ea2a06b80a6afbcc2368cc8acfc2cc08052bc045cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...