Lucene search

K
osvGoogleOSV:GO-2022-0247
HistoryMay 24, 2022 - 8:14 p.m.

Buffer overflow in WASM modules in misc/wasm and cmd/link

2022-05-2420:14:28
Google
osv.dev
17

9.6 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

75.0%

When invoking functions from WASM modules, built using GOARCH=wasm GOOS=js, passing very large arguments can cause portions of the module to be overwritten with data from the arguments due to a buffer overflow error.

If using wasm_exec.js to execute WASM modules, users will need to replace their copy (as described in https://golang.org/wiki/WebAssembly#getting-started) after rebuilding any modules.