GitHub Advisoryadvisory · SwiftURL, PyPI, crates.io

GHSA-fmq6-4w57-2w3v wasm3 uncontrolled memory allocation vulnerability

MEDIUM Published 2024-11-09 Modified 2026-06-08 Official page ↗
Aliases
CVE-2024-27529
Ecosystem
SwiftURL, PyPI, crates.io
Packages
github.com/shareup/wasm-interpreter-apple, pywasm3, wasm3
Severity
Moderate
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-125, CWE-400
Reviewed
2024-11-12

Affected packages

• SwiftURL github.com/shareup/wasm-interpreter-apple: <= 0.8.1 (no fix yet) • PyPI pywasm3: <= 0.5.0 (no fix yet) • crates.io wasm3: <= 0.3.1 (no fix yet)

Description

wasm3 at commit 139076a contains a memory leak in the Read_utf8 function.

Related

Alias · CVE (1)

  • CVE-2024-27529 wasm3 139076a contains memory leaks in Read_utf8. vulnerability

Weakness · CWE (2)

  • CWE-125 Out-of-bounds Read weakness
  • CWE-400 Uncontrolled Resource Consumption weakness

References