Privilege Escalation Vulnerability in Bytecode Alliance Wasm Micro Runtime
CVE-2024-25431

7.8HIGH

Key Information:

Vendor

Bytecodealliance

Status
Webassembly Micro Runtime
Vendor
CVE Published:
8 November 2024

What is CVE-2024-25431?

A remote code execution vulnerability exists in the Bytecode Alliance Wasm Micro Runtime prior to version v.b3f728c. This issue can be exploited by an attacker through a specially crafted file targeting the check_was_abi_compatibility function, leading to potential privilege escalation. It is essential for users of affected versions to apply the necessary updates to safeguard their systems against potential exploits resulting from this vulnerability.

References

https://github.com/bytecodealliance/wasm-micro-runtime/is...
https://github.com/bytecodealliance/wasm-micro-runtime/pu...
https://gist.github.com/haruki3hhh/bd228e6dcaf8c18140e107...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.