Out-of-Bound Memory Write in WebAssembly wabit 1.0.33
CVE-2023-46332

5.5MEDIUM

Key Information:

Vendor

Webassembly

Status
Webassembly Binary Toolkit
Vendor
CVE Published:
23 October 2023

What is CVE-2023-46332?

WebAssembly wabt version 1.0.33 is susceptible to an Out-of-Bound Memory Write vulnerability found in the DataSegment::Drop() function. This flaw can result in a segmentation fault, potentially leading to application crashes and allowing attackers to exploit the vulnerability for unauthorized actions.

References

https://github.com/WebAssembly/wabt/issues/2311

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2023-46332 : Out-of-Bound Memory Write in WebAssembly wabit 1.0.33