CVE-2024-35422

CVE-2024-35422 concerns vmir e8117, where a heap buffer overflow is reported in the wasm_call function located at /src/vmir_wasm_parser.c. Multiple sources (NVD, Red Hat, CVE lists) describe this as the underlying issue; there is no public exploit details provided in the connected documents. One ...

CVE-2024-35421

CVE-2024-35421 affects vmir (version e8117). The issue is a segmentation fault in the wasm_parse_block function located at /src/vmir_wasm_parser.c, caused by an underlying bug in wasm parsing. Impact is listed as Availability Impact = HIGH, with Confidentiality/Integrity not affected; Overall CVS...

CVE-2024-35425

CVE-2024-35425 affects vmir e8117. A segmentation violation occurs in the function_prepare_parse function located at /src/vmir_function.c. CVSSv3.1 = 5.5 (Medium): Attack vector LOCAL, privileges NONE, user interaction REQUIRED, impact on Availability HIGH. Exploitation status is not indicated in...

CVE-2024-35424

CVE-2024-35424 affects the VMIR library (e8117) with a segmentation violation in the internal function import_function at /src/vmir_wasm_parser.c. The metric data indicates a MEDIUM base score (CVSS 3.1: AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) and a HIGH impact on availability, with no confidentiali...

CVE-2024-35427

The CVE-2024-35427 entry relates to VMIR e8117, a standalone C library. Multiple connected sources confirm a segmentation fault triggered by the export_function function in /src/vmir_wasm_parser.c, constituting a vulnerability in the VMIR parsing path. The core issue is a segmentation violation w...

CVE-2024-35423

CVE-2024-35423 affects vmir e8117, with a heap buffer overflow in wasm_parse_section_functions implemented in /src/vmir_wasm_parser.c. Impact described as high with LOCAL access and user interaction required. Some sources note a workaround: temporarily disable wasm_parse_section_functions until a...

CVE-2024-35426

CVE-2024-35426 affects the standalone VMIR library (e8117) with a stack overflow in the init_local_vars function at /src/vmir_wasm_parser.c. The NVD entry notes CVSS v3.1 base score 9.8 (CRITICAL) with network access, no user interaction, and high impact to confidentiality/integrity/availability....