PT-2022-37401 · Wasm3 · Wasm3

Published 2022-04-16 · Updated 2022-04-16

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Wasm3 version 0.5.0

Description The issue is a heap-based buffer overflow in the NewCodePage function located in m3 code.c, which is indirectly called from the Compile BranchTable function in m3 compile.c.

Recommendations For Wasm3 version 0.5.0, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

PYSEC-2022-43153

Affected Products

Wasm3

References · 2

• https://osv.dev/vulnerability/PYSEC-2022-43153 · Vendor Advisory
• https://github.com/wasm3/wasm3/issues/320 · Note