Описание
WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime. Prior to version 2.4.4, WAMR is susceptible to a segmentation fault in v128.store instruction. This issue has been patched in version 2.4.4.
Ссылки
- Release Notes
- ExploitVendor Advisory
- ExploitVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2.4.4 (исключая)
cpe:2.3:a:bytecodealliance:webassembly_micro_runtime:*:*:*:*:*:*:*:*
EPSS
Процентиль: 2%
0.00014
Низкий
4.7 Medium
CVSS3
5.5 Medium
CVSS3
Дефекты
CWE-754
Связанные уязвимости
msrc
22 дня назад
WebAssembly Micro Runtime vulnerable to a segmentation fault in v128.store instruction
EPSS
Процентиль: 2%
0.00014
Низкий
4.7 Medium
CVSS3
5.5 Medium
CVSS3
Дефекты
CWE-754