CVE-2023-48105
CVSS 3.1 Score 7.5 of 10 (high)
Details
Summary
CVE-2023-48105 is an heap overflow vulnerability discovered in the Bytecode Alliance wasm-micro-runtime version 1.2.3. This issue allows a remote attacker to cause a denial of service by exploiting the wasm_loader_prepare_bytecode function in core/iwasm/interpreter/wasm_loader.c. The vulnerability impacts the wasm-micro-runtime, which is a popular WebAssembly runtime, and may lead to unintended termination or crashes of the affected system. Successful exploitation of this vulnerability may result in a denial of service condition, impacting the availability of the targeted web application or service. It is highly recommended that users upgrade to a patched version of the runtime as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Bytecode Alliance
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions