medium6.2
CVE-2024-35418
wac commit 385e1 was discovered to contain a heap overflow via the setup_call function at /wac-asan/wa.c.
Impact
wac commit 385e1 was discovered to contain a heap overflow via the setup_call function at /wac-asan/wa.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted wasm file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kanaka | Wac | Version 2019-10-01 |