PT-2022-26828 · Unknown+1 · Wasm-Interp+1
CVSS v3.1
7.1
High
| Vector | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
wasm-interp version 1.0.29
Description
The issue is related to an out-of-bounds read in the
OnReturnCallIndirectExpr component, specifically via the GetReturnCallDropKeepCount method.Recommendations
For version 1.0.29, consider restricting access to the
OnReturnCallIndirectExpr component until a patch is available.
As a temporary workaround, avoid using the GetReturnCallDropKeepCount method in the affected component to minimize the risk of exploitation.Exploit
Fix
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Wasm-Interp