CVE-2023-27116

WebAssembly v1.0.29 discovered to contain an abort in CWriter::MangleType...

Mozilla: Incoherent instruction cache when building WASM on ARM64

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of inconsistent data in the instruction and data cache when creating wasm code, which could lead to a potentially exploitable crash...

Wasm 缓冲区错误漏洞

wasm3 is the fastest WebAssembly interpreter, as well as the most versatile runtime. A security vulnerability exists in Wasm3 0.5.0 that stems from an out-of-bounds write called from EvaluateExpression and InitDataSegments in the runtime version...

Exploit for Improper Input Validation in Google Chrome

PoC exploit for CVE-2020-16040, an out-of-bounds write vulnerability in the WebAssembly WASM engine of various browsers. The exploit targets the WASM engine's handling of large arrays, allowing an attacker to write arbitrary data to the heap. The exploit is implemented in JavaScript, using the...

The vulnerability of the WASM technology implementation in Google Chrome web browser allows a hacker to execute arbitrary code.

The vulnerability of the WASM technology implementation in Google Chrome browser exists due to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Google Chromium WebAssembly Code Execution Vulnerability

Google Chromium is a web browser developed by Google, Inc. WebAssembly is a sandboxed execution environment. A security vulnerability exists in WebAssembly in Google Chromium versions prior to 69.0.3497.100. A remote attacker can exploit the vulnerability to execute arbitrary code in the sandbox...

CVE-2018-16764

In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service application crash or possibly have unspecified other impact because of an IR::FunctionValidationContext::catchall heap-based buffer over-read...

CVE-2017-15413

Type confusion in WebAssembly in V8 in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2018-5094

A heap buffer overflow vulnerability may occur in WebAssembly when "shrinkElements" is called followed by garbage collection on memory that is now uninitialized. This results in a potentially exploitable crash. This vulnerability affects Firefox 58...