إرسال #515327: https://github.com/WebAssembly/wabt wabt v1.0.36 Heap-based Buffer Overflowالمعلومات

عنوانhttps://github.com/WebAssembly/wabt wabt v1.0.36 Heap-based Buffer Overflow
الوصفA heap-buffer-overflow vulnerability arises in the wabt::interp::(anonymous namespace)::BinaryReaderInterp::OnExport function defined in wabt/src/interp/binary-reader-interp.cc at line 693. This issue occurs when processing certain malformed files and calls the function FuncType::Clone() in the first case of the switch statement, leading to an out-of-bounds read and potential application crash, resulting in a read operation beyond the allocated memory.
المصدر⚠️ https://github.com/WebAssembly/wabt/issues/2556
المستخدم
 Anonymous User
ارسال06/03/2025 08:35 AM (2 سنوات منذ)
الاعتدال16/03/2025 01:49 PM (10 days later)
الحالةتمت الموافقة
إدخال VulDB299867 [WebAssembly wabt 1.0.36 Malformed File binary-reader-interp.cc OnExport تلف الذاكرة]
النقاط20

Do you know our Splunk app?

Download it now for free!