CVE-2024-35410

The CVE-2024-35410 issue affects wac (commit 385e1) and is caused by a heap overflow in the interpret function (source file: /wac-asan/wa.c). Exploitation leads to Denial of Service via a specially crafted WebAssembly (wasm) file. Connected records confirm the same root cause across multiple feed...

CVE-2024-35419

CVE-2024-35419 affects the Wac project (commit 385e1). A heap overflow exists in the load_module function in /wac-asan/wa.c, enabling a DoS via a crafted WebAssembly (wasm) file. Public references from Red Hat, NVD, CVE lists, CNNVD and PT-Security corroborate the issue. The Red Hat entry and oth...

CVE-2024-35418

CVE-2024-35418 affects the wac project (WebAssembly in C). A heap overflow in the setup_call function (wa.c) allows an attacker to cause a Denial of Service via a crafted wasm file. Impact: CVSS v3.1 base score 6.2 (Medium); vector LOCAL, no privileges, no user interaction; availability impact HI...

CVE-2024-35420

The CVE-2024-35420 entry concerns wac, a minimal WebAssembly interpreter written in C. Connected sources confirm a heap overflow in commit 385e1. The vulnerability affects the wac project as described, but the provided documents do not specify affected versions beyond commit 385e1, nor do they de...