English version →
カテゴリ
CVE-2024-28123

Wasmi Out-of-bounds Write for host to Wasm calls with more than 128 Parameters

概要

Wasmi Out-of-bounds Write for host to Wasm calls with more than 128 Parameters

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

Wasmi is an efficient and lightweight WebAssembly interpreter with a focus on constrained and embedded systems. In the WASMI Interpreter, an Out-of-bounds Buffer Write will arise if the host calls or resumes a Wasm function with more parameters than the default limit (128), as it will surpass the stack value. This doesn’t affect calls from Wasm to Wasm, only from host to Wasm. This vulnerability was patched in version 0.31.1.

出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

参照URL

当サイトでは、アクセス解析と広告の効果測定のために Cookie を使います。株式会社Game のサイト共通の設定です。 詳しく