WAMR fast interpreter heap buffer overflow and memory leak
WAMR runner can be crashed or leaked by a bad file.
Summary
WAMR is a lightweight WebAssembly runtime, and a malicious wasm module can crash the host process, leak memory contents, or corrupt data. Builds with the fast interpreter and applications that load untrusted modules are affected.
Affected when
- WAMR_BUILD_FAST_INTERP=1 build
- untrusted wasm modules loaded
What to do
Update to 2.4.5. Until then, the source says turning off the fast interpreter avoids the vulnerable loader.
Products and platforms
CVE IDs
Sources
Times
First published
First seen