Submit #515406: https://github.com/WebAssembly/wabt wabt v1.0.36 Heap-based Buffer Overflowinfo

Titlehttps://github.com/WebAssembly/wabt wabt v1.0.36 Heap-based Buffer Overflow
DescriptionA heap-buffer-overflow vulnerability arises in the wabt::interp::(anonymous namespace)::BinaryReaderInterp::GetReturnCallDropKeepCount function defined in wabt/src/interp/binary-reader-interp.cc at line 451. This issue occurs when processing files with certain formatting errors, due to the lack of boundary checking, resulting in read operations exceeding allocated memory and potential application crashes.
Source⚠️ https://github.com/WebAssembly/wabt/issues/2557
User
 Anonymous User
Submission03/06/2025 14:30 (2 years ago)
Moderation03/21/2025 00:01 (14 days later)
StatusAccepted
VulDB entry300544 [WebAssembly wabt 1.0.36 binary-reader-interp.cc GetReturnCallDropKeepCount heap-based overflow]
Points20

Want to know what is going to be exploited?

We predict KEV entries!