CVE-2024-34251

Published: 6 May 2024

An out-of-bound memory read vulnerability was discovered in Bytecode Alliance wasm-micro-runtime v2.0.0 which allows a remote attacker to cause a denial of service via the "block_type_get_arity" function in core/iwasm/interpreter/wasm.h.

Notes

netdata embeds wasm-micro-runtime code.

Status

References

• https://www.cve.org/CVERecord?id=CVE-2024-34251
• https://github.com/bytecodealliance/wasm-micro-runtime/issues/3347
• NVD
• Launchpad
• Debian