medium5.5
CVE-2024-35419
wac commit 385e1 was discovered to contain a heap overflow via the load_module function at /wac-asan/wa.c.
Impact
wac commit 385e1 was discovered to contain a heap overflow via the load_module function at /wac-asan/wa.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted wasm file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kanaka | Wac | Version 2019-10-01 |