CVE-2022-43280

Name of the Vulnerable Software and Affected Versions wasm-interp version 1.0.29

Description The issue is related to an out-of-bounds read in the OnReturnCallExpr component, specifically via the GetReturnCallDropKeepCount method.

Recommendations For version 1.0.29, consider restricting access to the OnReturnCallExpr component until a patch is available. As a temporary workaround, avoid using the GetReturnCallDropKeepCount method to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.