Lucene search

GoogleOSV:CVE-2023-46331

HistoryOct 23, 2023 - 5:15 p.m.

CVE-2023-46331

2023-10-2317:15:08

Google

osv.dev

webassembly

wabt 1.0.33

out-of-bound memory read

datasegment::isvalidrange

segmentation fault

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

7.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.9%

JSON

WebAssembly wabt 1.0.33 has an Out-of-Bound Memory Read in in DataSegment::IsValidRange(), which lead to segmentation fault.

CPENameOperatorVersion
wabteq1.0.24-2
wabteq1.0.30-1
wabteq1.0.34+dsfg2+~cs1.0.32-1
wabteq1.0.27-1
wabteq1.0.32
wabteqbinary_0xb
wabteqgh-actions-test
wabteq1.0.10
wabteq1.0.22
wabteq1.0.20

Name	Operator	Version
wabt	eq	1.0.24-2
wabt	eq	1.0.30-1
wabt	eq	1.0.34+dsfg2+~cs1.0.32-1
wabt	eq	1.0.27-1
wabt	eq	1.0.32
wabt	eq	binary_0xb
wabt	eq	gh-actions-test
wabt	eq	1.0.10
wabt	eq	1.0.22
wabt	eq	1.0.20

Rows per page:

1-10 of 561

References

github.com/WebAssembly/wabt/issues/2310

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

7.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.9%

JSON

Related for OSV:CVE-2023-46331