CVE-2023-48105: bytecodealliance webassembly_micro_runtime Out-of-bounds Write

Vulnerability summary

CVE-2023-48105 is a high (CVSS 7.5) Out-of-bounds Write vulnerability in bytecodealliance webassembly_micro_runtime. EPSS estimates a 1.00% chance of exploitation in the next 30 days, higher than 62.2% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 22-11-2023
   PublishedVulnerability first disclosed.
2. 09-07-2026
   Last modifiedVulnerability information updated.

Description

An heap overflow vulnerability was discovered in Bytecode alliance wasm-micro-runtime v.1.2.3 allows a remote attacker to cause a denial of service via the wasm_loader_prepare_bytecode function in core/iwasm/interpreter/wasm_loader.c.

• CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.