CVE-2024-27532 — NULL Pointer Dereference in Webassembly Micro Runtime

CWE-476 — NULL Pointer Dereference3 documents3 sources
Severity
7.5HIGHNVD
EPSS
0.2%
top 63.83%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
9
Bytecodealliance Webassembly Micro RuntimeMsrc Azl3 Fluent-bit 3.1.9-2 ON Azure Linux 3.0Msrc Azl3 Fluent-bit 3.1.9-4 ON Azure Linux 3.0+6 more
Timeline
PublishedNov 8
Latest updateNov 12

Description

wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) 06df58f is vulnerable to NULL Pointer Dereference in function `block_type_get_result_types.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages9 packages

🔴Vulnerability Details

1
GHSA
GHSA-7h2g-q5x6-pwg2: wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) 06df58f is vulnerable to NULL Pointer Dereference in function `block_type_get_result_types↗2024-11-09
▶

📋Vendor Advisories

1
Microsoft
wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) 06df58f is vulnerable to NULL Pointer Dereference in function `block_type_get_result_types.↗2024-11-12
▶
CVE-2024-27532 — NULL Pointer Dereference | cvebase