Heap Overflow Vulnerability in WebAssembly v1.0.29 by WABT
CVE-2023-27117

7.8HIGH

Key Information:

Vendor

Webassembly

Status
Webassembly
Vendor
CVE Published:
10 March 2023

What is CVE-2023-27117?

A heap overflow vulnerability has been identified in WebAssembly v1.0.29 through a defect in the wabt::Node::operator component. This flaw can lead to memory corruption and potentially enable attackers to execute arbitrary code, posing significant risks to applications that rely on this version of WebAssembly.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/WebAssembly/wabt/issues/1989

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.