PT-2023-23409 · Unknown+1 · Webassembly Wat2Wasm+1
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
WebAssembly wat2wasm version 1.0.32
Description
The issue allows attackers to cause a libc++abi.dylib crash by putting '@' before a quote ("").
Recommendations
For version 1.0.32, avoid using the '@' symbol before a quote (") in the input to prevent the crash. As a temporary workaround, consider validating the input to ensure it does not contain the '@' symbol before a quote until a patch is available.
Exploit
Correção
Improper Encoding or Escaping of Output
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Debian
Webassembly Wat2Wasm