PT-2024-24758 · Samsung · Walrus

Jeongmin Choi + 1 · Published 2024-07-03 · Updated 2024-08-16 · CVE-2024-32673

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Walrus versions before 72c7230f32a0b791355bbdfc78669701024b0956

Description The issue is related to an Improper Validation of Array Index in the Samsung Open Source Walrus Webassembly runtime engine, which can cause a segmentation fault.

Recommendations For versions before 72c7230f32a0b791355bbdfc78669701024b0956, update to a version after 72c7230f32a0b791355bbdfc78669701024b0956 to resolve the issue.

Fix

Improper Validation of Array Index

Weakness Enumeration

CWE-129

Related Identifiers

CVE-2024-32673

Affected Products

Walrus

References · 3

• https://github.com/Samsung/walrus/pull/241 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-32673 · Security Note
• https://t.me/cvenotify/90872 · Telegram Post