CVE-2024-28123

Katalog CVE

CVSS 9.8 · Critical EPSS 0,80%

Kerentanan Out-of-bounds Write pada wasmi-labs wasmi. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

Wasmi is an efficient and lightweight WebAssembly interpreter with a focus on constrained and embedded systems. In the WASMI Interpreter, an Out-of-bounds Buffer Write will arise if the host calls or resumes a Wasm function with more parameters than the default limit (128), as it will surpass the stack value. This doesn’t affect calls from Wasm to Wasm, only from host to Wasm. This vulnerability was patched in version 0.31.1.

Rincian

Terbit di NVD

21 Maret 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,80% peluang dieksploitasi; lebih tinggi dari 55,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/wasmi-labs/wasmi/security/advisories/GHSA-75jp-vq8x-h4cq advisory vendor
• https://github.com/wasmi-labs/wasmi/commit/f7b3200e9f3dc9e2cbca966cb255c228453c792f patch
• https://github.com/wasmi-labs/wasmi/releases/tag/v0.31.1 release notes