TI-2025-02727 CVE-2025-3122 · GHSA-8cmg-37qm-wxhr
WebAssembly wabt binary-reader-interp.cc BeginFunctionBody null pointer dereference
Priority MEDIUM 45
A vulnerability classified as problematic was found in WebAssembly wabt 1.0.36.
5 records
A vulnerability classified as problematic was found in WebAssembly wabt 1.0.36.
WebAssembly wabt 1.0.33 contains an Out-of-Bound Memory Write in DataSegment::Drop(), which lead to segmentation fault.
WebAssembly wabt 1.0.33 has an Out-of-Bound Memory Read in in DataSegment::IsValidRange(), which lead to segmentation fault.
An issue in wasm2c 1.0.32, wasm2wat 1.0.32, wasm-decompile 1.0.32, and wasm-validate 1.0.32 allows attackers to cause a Denial of Service (DoS) via running a crafted binary.
WebAssembly wat2wasm v1.0.32 allows attackers to cause a libc++abi.dylib crash by putting '@' before a quote (").