Heap Overflow Vulnerability in WebAssembly v1.0.29 by WABT
CVE-2023-27117

7.8HIGH

Key Information:

Vendor

Webassembly

Status
Webassembly
Vendor
CVE Published:
10 March 2023

What is CVE-2023-27117?

A heap overflow vulnerability has been identified in WebAssembly v1.0.29 through a defect in the wabt::Node::operator component. This flaw can lead to memory corruption and potentially enable attackers to execute arbitrary code, posing significant risks to applications that rely on this version of WebAssembly.

References

https://github.com/WebAssembly/wabt/issues/1989

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2023-27117 : Heap Overflow Vulnerability in WebAssembly v1.0.29 by WABT