CVE-2023-48105

Summary

CVE-2023-48105 is an heap overflow vulnerability discovered in the Bytecode Alliance wasm-micro-runtime version 1.2.3. This issue allows a remote attacker to cause a denial of service by exploiting the wasm_loader_prepare_bytecode function in core/iwasm/interpreter/wasm_loader.c. The vulnerability impacts the wasm-micro-runtime, which is a popular WebAssembly runtime, and may lead to unintended termination or crashes of the affected system. Successful exploitation of this vulnerability may result in a denial of service condition, impacting the availability of the targeted web application or service. It is highly recommended that users upgrade to a patched version of the runtime as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.