PT-2022-26828

CVE-2022-43282

Published

2022-10-28

Updated

2026-10-31

Description by

CVSS 3.1

7.1

High

MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions wasm-interp version 1.0.29

Description The issue is related to an out-of-bounds read in the OnReturnCallIndirectExpr component, specifically via the GetReturnCallDropKeepCount method.

Recommendations For version 1.0.29, consider restricting access to the OnReturnCallIndirectExpr component until a patch is available. As a temporary workaround, avoid using the GetReturnCallDropKeepCount method in the affected component to minimize the risk of exploitation.

Exploitability

Exploit

Fix

Impacts

Researchers

Q1Iq

Vendors

Affected products

Weakness enumeration

CWE-125: Out-of-bounds Read

Related identifiers

CVE-2022-43282