Description
A vulnerability has been found in wasm3 0.5.0 and classified as problematic. This vulnerability affects the function MarkSlotAllocated of the file source/m3_compile.c. The manipulation leads to out-of-bounds write. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | wasm3 | 0.5.0 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | pywasm3 | <= 0.5.0 | — | GHSA-rrmw-gv85-w824 |
References
- VDB-313276 | wasm3 m3_compile.c MarkSlotAllocated out-of-bounds write vdb-entry technical-description
- VDB-313276 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- Submit #593008 | wasm3 wasm3 v0.5.0 (commit 79d412e) Out-of-bounds Write third-party-advisory
- https://github.com/wasm3/wasm3/issues/531 issue-tracking
- https://github.com/user-attachments/files/19516600/wasm3_crash.txt exploit