Las7

A time-of-check/time-of-use (TOCTOU) race condition exists in the wasip3 wasi:sockets udp-socket host implementation. This flaw allows guests to bypass send restrictions enforced by the `socket addr check` function. A malicious guest can exploit this by racing `udp-socket.send` against `udp-socket.connect` to send attacker-controlled datagrams to addresses that the policy only permits for receiving.

A logic bug in the RPC backend's `deserialize tensor()` function allows an unauthenticated attacker to read and write arbitrary process memory. This occurs because bounds validation is skipped when a tensor's `buffer` field is set to 0. By sending crafted 'GRAPH COMPUTE' messages and utilizing pointer leaks from 'ALLOC BUFFER' and 'BUFFER GET BASE', an attacker can achieve a full ASLR (Address Space Layout Randomization) bypass and remote code execution. The attack requires only TCP access to the RPC server port and no authentication.