OSV-2023-1119

    Dashboard / Vulnerabilities / OSV-2023-1119

    OSV-2023-1119

    Published: 6 Nov 2023Last Modified: 6 Nov 2023

    Summary: Segv on unknown address in FunctionCompiler::compileReturn

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63885 ``` Crash type: Segv on unknown address Crash state: FunctionCompiler::compileReturn WasmEdge::AOT::Compiler::compile WasmEdge::AOT::Compiler::compile ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63885

    Affected packages

    Package

    Name: wasmedge

    Purl: pkg:generic/wasmedge

    Affected ranges

    Type: GIT

    Events:

    Introduced- 58a6d439aeb507ab6e80a2e3b94bb7b33f916f6b
    Fixed -9ba5f8faeacc35ea41033a4e384bef9cc18e9f5c

    Affected versions

    0.13.5

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2023-1119 | CVE-DB