haruki3hhh

> [Discoverer]
> Ziyi Guo, L4Nce, Quhe


> [Description]
> An issue in bytecodealliance wasm-micro-runtime before v.b3f728c and
> fixed in commit 06df58f allows a remote attacker to escalate privileges
> via a crafted file to the check_was_abi_compatibility function
>
> ------------------------------------------

haruki3hhh

Discoverers: Ziyi Guo, quhe, L4Nce

Details:

[Suggested description] wasm3 139076a is vulnerable to Denial of Service (DoS).

---

[VulnerabilityType Other] DoS

haruki3hhh

Discoverers: Ziyi Guo, quhe, L4Nce

Details

[Suggested description] wasm3 139076a suffers from Invalid Memory Read, leading to DoS and potential Code Execution.

---

[VulnerabilityType Other] Evil/invlid memory dereference

haruki3hhh

Discoverers: Ziyi Guo, quhe, L4Nce

Details:

[Suggested description] wasm3 139076a contains memory leaks in Read_utf8

---

[VulnerabilityType Other] memory leaks >

haruki3hhh

Discoverers: Ziyi Guo, quhe, L4Nce

Details:

[Suggested description] wasm3 139076a contains a Use-After-Free in ForEachModule.

---

[VulnerabilityType Other] Use-After-Free >

haruki3hhh

Discoverers: Ziyi Guo, quhe, L4Nce

Details:

[Suggested description] wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) 06df58f is vulnerable to NULL Pointer Dereference in function `block_type_get_result_types.

---

[VulnerabilityType Other]

haruki3hhh

Discoverers: Ziyi Guo

Details:

[Suggested description] wac commit 385e1 was discovered to contain a heap overflow via the interpret function at /wac-asan/wa.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted wasm file.

---

[Vulnerability Type]

haruki3hhh

Discoverers: Ziyi Guo

Details:

[Suggested description] wac commit 385e1 was discovered to contain a heap overflow via the setup_call function at /wac-asan/wa.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted wasm file.

---

[Vulnerability Type]

haruki3hhh

# Discoverers: Ziyi Guo
# Details:
> [Suggested description]
> wac commit 385e1 was discovered to contain a heap overflow via the
> load_module function at /wac-asan/wa.c. This vulnerability allows
> attackers to cause a Denial of Service (DoS) via a crafted wasm file.
>
> ------------------------------------------
>
> [Vulnerability Type]

haruki3hhh

Discoverers: Ziyi Guo

Details:

[Suggested description] wac commit 385e1 was discovered to contain a heap overflow.

---

[VulnerabilityType Other] DoS >