漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
WebAssembly wabt binary-reader-interp.cc GetFuncOffset use after free
Vulnerability Description
A vulnerability was found in WebAssembly wabt up to 1.0.37. It has been declared as problematic. Affected by this vulnerability is the function GetFuncOffset of the file src/interp/binary-reader-interp.cc. The manipulation leads to use after free. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. A similar issue reported during the same timeframe was disputed by the code maintainer because it might not affect "real world wasm programs". Therefore, this entry might get disputed as well in the future.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Vulnerability Type
释放后使用
Vulnerability Title
WebAssembly wabt 资源管理错误漏洞
Vulnerability Description
WebAssembly wabt是WebAssembly开源的一个WebAssembly二进制工具包。 WebAssembly wabt 1.0.37及之前版本存在资源管理错误漏洞,该漏洞源于文件src/interp/binary-reader-interp.cc中函数GetFuncOffset存在释放后重用。
CVSS Information
N/A
Vulnerability Type
N/A