PT-2022-26826

CVE-2022-43280

Published

2022-10-28

Updated

2026-10-31

Description by

CVSS 3.1

7.1

High

MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions wasm-interp version 1.0.29

Description The issue is related to an out-of-bounds read in the OnReturnCallExpr component, specifically via the GetReturnCallDropKeepCount method.

Recommendations For version 1.0.29, consider restricting access to the OnReturnCallExpr component until a patch is available. As a temporary workaround, avoid using the GetReturnCallDropKeepCount method to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploitability

Exploit

Fix

Impacts

Researchers

Q1Iq

Vendors

Affected products

Weakness enumeration

CWE-125: Out-of-bounds Read

Related identifiers

CVE-2022-43280