提出 #515327: https://github.com/WebAssembly/wabt wabt v1.0.36 Heap-based Buffer Overflow情報

タイトルhttps://github.com/WebAssembly/wabt wabt v1.0.36 Heap-based Buffer Overflow
説明A heap-buffer-overflow vulnerability arises in the wabt::interp::(anonymous namespace)::BinaryReaderInterp::OnExport function defined in wabt/src/interp/binary-reader-interp.cc at line 693. This issue occurs when processing certain malformed files and calls the function FuncType::Clone() in the first case of the switch statement, leading to an out-of-bounds read and potential application crash, resulting in a read operation beyond the allocated memory.
ソース⚠️ https://github.com/WebAssembly/wabt/issues/2556
ユーザー
 Anonymous User
送信2025年03月06日 08:35 (2 年 ago)
モデレーション2025年03月16日 13:49 (10 days later)
ステータス承諾済み
VulDBエントリ299867 [WebAssembly wabt 1.0.36 Malformed File binary-reader-interp.cc OnExport メモリ破損]
ポイント20

Want to know what is going to be exploited?

We predict KEV entries!