CVE-2024-27528

Vulnerability

wasm3 version 139076a contains an invalid memory read vulnerability in the op_Select_i32_ssr function within m3_exec.h [1][2]. The issue is triggered when processing a specially crafted WebAssembly (wasm) file, leading to a segmentation fault as shown by AddressSanitizer output [1]. The affected build was created with GCC and AddressSanitizer enabled [1].

Exploitation

An attacker can exploit this vulnerability remotely or locally by supplying a malicious wasm file to the wasm3 interpreter [2]. The crash occurs during the execution of op_Select_i32_ssr when a crafted input causes an invalid memory read, as evidenced by the ASAN log showing a SEGV on an unknown address [1]. No authentication or user interaction beyond opening the file is required [2].

Impact

Successful exploitation leads to a denial of service due to the crash, and the description notes potential for arbitrary code execution [1][2]. The severity is high, and the attack can be launched remotely [2].

Mitigation

As of the latest references, no patch or fixed version has been released [1][2]. Users should avoid processing untrusted wasm files and monitor the wasm3 repository for updates. The vulnerability is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.