CVE-2023-46331 WebAssembly wabt 1.0.33 has an Out-of-Bound Memory Read in in DataSegment::IsValidRange(), which lead to segmentation fault.
MediumCVSS 5.5
EPSS 0.22%
- Published
- Updated
- Exploit status
- No public exploit known
Description
WebAssembly wabt 1.0.33 has an Out-of-Bound Memory Read in in DataSegment::IsValidRange(), which lead to segmentation fault.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi wabt(PyPI) | <= 1.0.33 | No fix listed |
| pypi wabt(PyPI) | = 0.1 | No fix listed |
| pypi wabt(PyPI) | = 0.1.1 | No fix listed |
| pypi wabt(PyPI) | = 0.1.2 | No fix listed |
| debian/wabt(Debian:12) | All versions | No fix listed |
| debian/wabt(Debian:12) | = 1.0.32-1 | No fix listed |
| debian/wabt(Debian:12) | = 1.0.33-1 | No fix listed |
| debian/wabt(Debian:12) | = 1.0.34+dsfg+~cs1.0.32-1 | No fix listed |
| debian/wabt(Debian:12) | = 1.0.34+dsfg2+~cs1.0.32-1 | No fix listed |
| debian/wabt(Debian:12) | = 1.0.34+dsfg2+~cs1.0.32-2 | No fix listed |
| debian/wabt(Debian:12) | = 1.0.34+dsfg2+~cs1.0.32-3 | No fix listed |
| debian/wabt(Debian:12) | = 1.0.34+dsfg2+~cs1.0.32-4 | No fix listed |
| debian/wabt(Debian:12) | = 1.0.34-1 | No fix listed |
| debian/wabt(Debian:12) | = 1.0.36+dfsg+~cs1.0.36-1 | No fix listed |
| debian/wabt(Debian:12) | = 1.0.36+dfsg+~cs1.0.36-2 | No fix listed |
| debian/wabt(Debian:12) | = 1.0.41+dfsg+~cs1.0.39-1 | No fix listed |
| debian/wabt(Debian:12) | = 1.0.41+dfsg+~cs1.0.39-2 | No fix listed |
| debian/wabt(Debian:12) | = 1.0.42+dfsg+~cs1.0.39-1 | No fix listed |
| debian/wabt(Debian:12) | = 1.0.42+dfsg+~cs1.0.39-2 | No fix listed |
| debian/wabt(Debian:13) | All versions | No fix listed |
| debian/wabt(Debian:13) | = 1.0.36+dfsg+~cs1.0.36-2 | No fix listed |
| debian/wabt(Debian:13) | = 1.0.41+dfsg+~cs1.0.39-1 | No fix listed |
| debian/wabt(Debian:13) | = 1.0.41+dfsg+~cs1.0.39-2 | No fix listed |
| debian/wabt(Debian:13) | = 1.0.42+dfsg+~cs1.0.39-1 | No fix listed |
| debian/wabt(Debian:13) | = 1.0.42+dfsg+~cs1.0.39-2 | No fix listed |
Show 11 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/wabt(Debian:14) | All versions | No fix listed |
| debian/wabt(Debian:14) | = 1.0.36+dfsg+~cs1.0.36-2 | No fix listed |
| debian/wabt(Debian:14) | = 1.0.41+dfsg+~cs1.0.39-1 | No fix listed |
| debian/wabt(Debian:14) | = 1.0.41+dfsg+~cs1.0.39-2 | No fix listed |
| debian/wabt(Debian:14) | = 1.0.42+dfsg+~cs1.0.39-1 | No fix listed |
| debian/wabt(Debian:14) | = 1.0.42+dfsg+~cs1.0.39-2 | No fix listed |
| ubuntu/wabt(Ubuntu:22.04) | All versions | No fix listed |
| ubuntu/wabt(Ubuntu:24.04) | All versions | No fix listed |
| webassembly binary toolkit | = 1.0.33 | No fix listed |
| ubuntu/wabt(Ubuntu:26.04) | All versions | No fix listed |
| ubuntu/wabt(Ubuntu:26.10) | All versions | No fix listed |
References
- github.com issue-tracking vendor-advisory
- Debian Security Tracker CVE-2023-46331 vendor-advisory
- Ubuntu CVE tracker vendor-advisory
- www.cve.org