CVE-2024-34250

A heap buffer overflow vulnerability exists in the Bytecode Alliance wasm-micro-runtime v2.0.0 within the wasm_loader_check_br function located in core/iwasm/interpreter/wasm_loader.c. This flaw allows a remote attacker to cause at least a denial of service . The vulnerability impacts products us...

CVE-2024-25431

CVE-2024-25431 affects the WebAssembly Micro Runtime (WAMR) from Bytecode Alliance. Pre- v.b3f728c builds are vulnerable to privilege escalation via a crafted file that targets the check_was_abi_compatibility function. The issue is mitigated by the fix introduced in commit 06df58f. Multiple conne...

CVE-2024-34251

The Bytecode Alliance wasm-micro-runtime (WAMR) version v2.0.0 is affected by an out-of-bound memory read vulnerability. The issue resides in the block_type_get_arity function located in core/iwasm/interpreter/wasm.h (and wasm_loader.c). A remote attacker can exploit this memory handling flaw to ...

CVE-2024-27532

The wasm-micro-runtime (also known as WebAssembly Micro Runtime or WAMR) is vulnerable to a NULL Pointer Dereference within the block_type_get_result_types function. This vulnerability affects various environments, including Azure Linux 3.0 and CBL Mariner hosts. Specifically, the fluent-bit pack...