by Kastro
Paper/Archive/CVE-2024-28123

CVE-2024-28123

wasmi-labs wasmi — Wasmi Out-of-bounds Write for host to Wasm calls with more than 128 Parameters

EPSS 0.8%CVSS 9.8
critical.is priorityof 100
41
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 56.5.565 × 2011.3No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Wasmi is an efficient and lightweight WebAssembly interpreter with a focus on constrained and embedded systems. In the WASMI Interpreter, an Out-of-bounds Buffer Write will arise if the host calls or resumes a Wasm function with more parameters than the default limit (128), as it will surpass the stack value. This doesn’t affect calls from Wasm to Wasm, only from host to Wasm. This vulnerability was patched in version 0.31.1.

Affected

ProductAffectedFixed inSource
wasmi>= 0.15.0, <= 0.31.0–CNA
wasmi0.15.0 – 0.31.0–CISA-ADP

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
GitHub_M (CNA)7.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

refgithub.com/wasmi-labs/wasmi/security/advisories/GHSA-75jp-vq8x-h4cqrefgithub.com/wasmi-labs/wasmi/commit/f7b3200e9f3dc9e2cbca966cb255c228453c792frefgithub.com/wasmi-labs/wasmi/releases/tag/v0.31.1