cve/2024/CVE-2024-34251.md

CVE-2024-34251

Description

An out-of-bound memory read vulnerability was discovered in Bytecode Alliance wasm-micro-runtime v2.0.0 which allows a remote attacker to cause a denial of service via the "block_type_get_arity" function in core/iwasm/interpreter/wasm.h.

POC

Reference

• https://github.com/bytecodealliance/wasm-micro-runtime/issues/3347
• https://github.com/bytecodealliance/wasm-micro-runtime/issues/3347

Github

• https://github.com/fkie-cad/nvd-json-data-feeds