Heap Overflow Vulnerability in Bytecode Alliance Wasm-Micro-Runtime
CVE-2023-48105

7.5HIGH

Key Information:

Vendor

Bytecodealliance

Status
Webassembly Micro Runtime
Vendor
CVE Published:
22 November 2023

What is CVE-2023-48105?

A heap overflow vulnerability has been identified in Bytecode Alliance's wasm-micro-runtime version 1.2.3. This vulnerability can be exploited by a remote attacker to trigger a denial of service by manipulating the wasm_loader_prepare_bytecode function located in core/iwasm/interpreter/wasm_loader.c. Such exploitation can destabilize the service, making it essential for organizations using this runtime to patch and secure their systems.

References

http://bytecode.com
http://wasm-micro-runtime.com
https://github.com/bytecodealliance/wasm-micro-runtime/is...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.