CVE-2022-43282

Name of the Vulnerable Software and Affected Versions wasm-interp version 1.0.29

Description The issue is related to an out-of-bounds read in the OnReturnCallIndirectExpr component, specifically via the GetReturnCallDropKeepCount method.

Recommendations For version 1.0.29, consider restricting access to the OnReturnCallIndirectExpr component until a patch is available. As a temporary workaround, avoid using the GetReturnCallDropKeepCount method in the affected component to minimize the risk of exploitation.