high8.4
CVE-2024-27528
pywasm3 has an Invalid Memory Read, Leading to DoS and Potential Code Execution
Impact
wasm3 139076a suffers from Invalid Memory Read, leading to DoS and potential Code Execution.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | pywasm3 | <= 0.5.0 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wasm3 Project | Wasm3 | Version 139076a |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://gist.github.com/haruki3hhh/baa757c4af4fefb410d9c74d7a68152e
- https://github.com/wasm3/wasm3/issues/463
- https://github.com/advisories/GHSA-mhg9-mm8c-c683
- https://nvd.nist.gov/vuln/detail/CVE-2024-27528
- https://github.com/pypa/advisory-database/tree/main/vulns/pywasm3/PYSEC-2024-304.yaml
- https://github.com/wasm3/pywasm3/blob/main/wasm3/m3_exec.h