What is GHSA-crf8-h2wq-2h9x?

GHSA-crf8-h2wq-2h9x is a security advisory published by GitHub Security Advisories with High severity. WASM3 Improper Input Validation vulnerability

Which CVE IDs does GHSA-crf8-h2wq-2h9x cover?

GHSA-crf8-h2wq-2h9x covers the following CVE IDs: CVE-2022-39974. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-crf8-h2wq-2h9x?

GHSA-crf8-h2wq-2h9x has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-crf8-h2wq-2h9x?

GHSA-crf8-h2wq-2h9x affects 2 products, including: pip/pywasm3:\u003c= 0.5.0; rust/wasm3:\u003c= 0.5.0.

GHSA-crf8-h2wq-2h9xHighCVSS 7.5

WASM3 Improper Input Validation vulnerability

Vendor

GitHub Security Advisories

Published

September 21, 2022

Last Modified

August 17, 2023

🔗 CVE IDs covered (1)

CVE-2022-39974 →

📋 Description

WASM3 v0.5.0 was discovered to contain a segmentation fault via the component op_Select_i32_srs in wasm3/source/m3_exec.h.

🎯 Affected products2

pip/pywasm3:<= 0.5.0
rust/wasm3:<= 0.5.0

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2022-39974
https://github.com/wasm3/wasm3/issues/379
https://github.com/wasm3/wasm3/issues/344
https://github.com/pypa/advisory-database/tree/main/vulns/pywasm3/PYSEC-2022-43058.yaml
https://github.com/advisories/GHSA-crf8-h2wq-2h9x