Out-of-Bounds Read Vulnerability in WebAssembly Interpreter v1.0.29
CVE-2022-43282

7.1HIGH

Key Information:

Vendor

Webassembly

Status
Wabt
Vendor
CVE Published:
28 October 2022

What is CVE-2022-43282?

An out-of-bounds read vulnerability was found in wasm-interp v1.0.29, specifically within the OnReturnCallIndirectExpr component. This flaw occurs during the processing of certain expressions, where the system may attempt to read beyond the allocated memory space. Such behavior could lead to unintended information disclosure or instability in the application.

References

https://github.com/WebAssembly/wabt/issues/1983

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2022-43282 : Out-of-Bounds Read Vulnerability in WebAssembly Interpreter v1.0.29