PT-2022-26827

CVE-2022-43281

Published

2022-10-28

Updated

2022-11-01

Description by

CVSS 3.1

7.8

High

MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions wasm-interp version 1.0.29

Description A heap overflow issue was discovered in the std::vector component, specifically via std::vector<wabt::Type, std::allocator<wabt::Type>>::size() at /bits/stl vector.h.

Recommendations For version 1.0.29, consider updating to a newer version that contains a fix for this issue, if available. As a temporary workaround, restrict access to the vulnerable component to minimize the risk of exploitation.

Exploitability

Exploit

Fix

Impacts

Researchers

Q1Iq

Vendors

Affected products

Weakness enumeration

CWE-787: Out-of-bounds Write

Related identifiers

CVE-2022-43281