GitHub Advisoryadvisory · PyPI, crates.io

GHSA-crf8-h2wq-2h9x WASM3 Improper Input Validation vulnerability

HIGH Published 2022-09-21 Modified 2024-10-15 Official page ↗

Aliases: CVE-2022-39974
Ecosystem: PyPI, crates.io
Packages: pywasm3, wasm3
Severity: High
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses: CWE-119, CWE-20
Reviewed: 2022-09-21

Affected packages

• PyPI pywasm3: <= 0.5.0 (no fix yet) • crates.io wasm3: <= 0.5.0 (no fix yet)

Description

WASM3 v0.5.0 was discovered to contain a segmentation fault via the component `op_Select_i32_srs` in `wasm3/source/m3_exec.h`.

Related

Alias · CVE (1)

CVE-2022-39974 WASM3 v0.5.0 was discovered to contain a segmentation fault via the component op_Select_i32_srs in wasm3/source/m3_exec.h. vulnerability

Weakness · CWE (2)

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
CWE-20 Improper Input Validation weakness

References