GitHub Advisoryadvisory · PyPI, crates.io

GHSA-gq4p-4hxv-5rg9 WASM3 segmentation fault

MEDIUM Published 2022-07-28 Modified 2024-10-15 Official page ↗

Aliases: CVE-2022-34529
Ecosystem: PyPI, crates.io
Packages: pywasm3, wasm3
Severity: Moderate
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weaknesses: CWE-119, CWE-125
Reviewed: 2023-08-18

Affected packages

• PyPI pywasm3: <= 0.5.0 (no fix yet) • crates.io wasm3: <= 0.5.0 (no fix yet)

Description

WASM3 v0.5.0 was discovered to contain a segmentation fault via the component `Compile_Memory_CopyFill`.

Related

Alias · CVE (1)

CVE-2022-34529 WASM3 v0.5.0 was discovered to contain a segmentation fault via the component Compile_Memory_CopyFill. vulnerability

Weakness · CWE (2)

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
CWE-125 Out-of-bounds Read weakness

References