CVE-2024-25431

CVE-2024-25431 affects the WebAssembly Micro Runtime (WAMR) from Bytecode Alliance. Pre- v.b3f728c builds are vulnerable to privilege escalation via a crafted file that targets the check_was_abi_compatibility function. The issue is mitigated by the fix introduced in commit 06df58f. Multiple conne...

CVE-2024-34250

CVE-2024-34250 : A heap buffer overflow was found in Bytecode Alliance’s wasm-micro-runtime v2.0.0, allowing a remote attacker to cause a denial of service via the function wasm_loader_check_br in core/iwasm/interpreter/wasm_loader.c. The vulnerability is described across multiple feeds (includin...

CVE-2024-34251

The CVE-2024-34251 issue affects Bytecode Alliance wasm-micro-runtime: version 2.0.0 contains an out-of-bounds memory read in block_type_get_arity within core/iwasm/interpreter/wasm.h, exposing a remote attacker to cause a denial of service. Public advisories (including Red Hat/RH CVE entry and O...

CVE-2024-27532

CVE-2024-27532 affects wasm-micro-runtime (WAMR) version 06df58f. The vulnerability is a NULL pointer dereference in the function block_type_get_result_types, as described in the CVE entry. CVSS says network attack vector, low attack complexity, no privileges or user interaction required, with co...