2448 matches found
EUVD-2026-72238
Integer overflow in the source-bounds check in Memory::init src/runtime/Memory.cpp in Samsung walrus on all platforms allows a remote attacker to cause an out-of-bounds heap read and denial of service via a crafted WebAssembly module in which a 32-bit unsigned addition wraps around and bypasses t...
CVE-2026-86314
Integer overflow in the source-bounds check in Memory::init src/runtime/Memory.cpp in Samsung walrus on all platforms allows a remote attacker to cause an out-of-bounds heap read and denial of service via a crafted WebAssembly module in which a 32-bit unsigned addition wraps around and bypasses t...
CVE-2026-86314
Integer overflow in the source-bounds check in Memory::init src/runtime/Memory.cpp in Samsung walrus on all platforms allows a remote attacker to cause an out-of-bounds heap read and denial of service via a crafted WebAssembly module in which a 32-bit unsigned addition wraps around and bypasses t...
CVE-2026-86314
Samsung Walrus (a WebAssembly runtime) is vulnerable to an integer overflow in the source-bounds check within Memory::init() (src/runtime/Memory.cpp). A crafted WebAssembly module can trigger a 32-bit unsigned addition that wraps around, bypassing the bounds check and causing an out-of-bounds hea...
PT-2026-86620
Integer overflow in the source-bounds check in Memory::init src/runtime/Memory.cpp in Samsung walrus on all platforms allows a remote attacker to cause an out-of-bounds heap read and denial of service via a crafted WebAssembly module in which a 32-bit unsigned addition wraps around and bypasses t...
exploitBenchSkill
OpenSec ExploitBench V8 PoC Skill An installable Pi and Agent...
OPENSUSE-SU-2026:20332-1 Security update for chromium
This update for chromium fixes the following issues: Changes in chromium: - Chromium 145.0.7632.159 boo1259213 CVE-2026-3536: Integer overflow in ANGLE CVE-2026-3537: Object lifecycle issue in PowerVR CVE-2026-3538: Integer overflow in Skia CVE-2026-3539: Object lifecycle issue in DevTools...
Amazon Linux 2 : firefox, --advisory ALAS2FIREFOX-2026-064 (ALASFIREFOX-2026-064)
The version of firefox installed on the remote host is prior to 140.14.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2FIREFOX-2026-064 advisory. Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the...
Amazon Linux 2 : thunderbird, --advisory ALAS2-2026-3880 (ALAS-2026-3880)
The version of thunderbird installed on the remote host is prior to 140.14.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3880 advisory. Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the...
Exploit for Use After Free in Mozilla Firefox
CVE-2026-74936 A not fancy reproduction. The baseline require...
EUVD-2026-41136
Wasmtime has a leak in WASIp1 fdrenumber implementation...
firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript: WebAssembly component...
Astra Linux – Vulnerability in Firefox
Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 150 and Thunderbird 150...
Astra Linux – Vulnerability in Chromium
Object corruption in WebAssembly in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Firefox
A use-after-free could occur during WASM execution if garbage collection ran during the creation of an array. This vulnerability affects Firefox 125...
Astra Linux – Vulnerability in Firefox
A stop condition for the iterator was missing when handling WASM code in the built-in profiler, potentially leading to invalid memory access and undefined behavior. Note: This issue only affects the application when the profiler is running. This vulnerability affects Firefox versions less than 12...
Astra Linux – Vulnerability in Firefox
The frame iterator could get stuck in a loop when encountering certain Wasm frames, leading to incorrect stack traces. This vulnerability affects Firefox 128 and Thunderbird 128...
Astra Linux – Vulnerability in Thunderbird, Firefox
On 64-bit CPUs, when the JIT compiler compiles WASM i32 return values, it may pick up bits from remaining memory. This could potentially lead to these values being treated as a different type. This vulnerability has been fixed in Firefox 136, Firefox ESR 115.21, Firefox ESR 128.8, Thunderbird 136...
Astra Linux – Vulnerability in Firefox and Thunderbird
Invalid pointer in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10...
Astra Linux – Vulnerability in Firefox, Thunderbird
On arm64, WASM code might result in incorrect assembly generation, leading to a register allocation issue and potentially a exploitable crash. This vulnerability affects Thunderbird 91.10, Firefox 101, and Firefox ESR 91.10...