CVE-2023-31669: Medium severity webassembly binary toolkit vulnerability
WebAssembly wat2wasm v1.0.32 allows attackers to cause a libc++abi.dylib crash by putting '@' before a quote (").
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-31669?
CVE-2023-31669 is a vulnerability in WebAssembly wat2wasm v1.0.32 that allows attackers to cause a libc++abi.dylib crash by putting '@' before a quote (").
What software versions are affected by CVE-2023-31669?
Versions 1.0.32 of the WebAssembly Binary Toolkit (WebAssembly wat2wasm) are affected by CVE-2023-31669.
How severe is CVE-2023-31669?
CVE-2023-31669 has a severity rating of 5.5, which is considered medium.
Are there any patches or fixes available for CVE-2023-31669?
At the moment, there are no known patches or fixes available for CVE-2023-31669. It is recommended to follow the official advisories for updates.
Where can I find more information about CVE-2023-31669?
You can find more information about CVE-2023-31669 on the GitHub issue page (https://github.com/WebAssembly/wabt/issues/2165) and on the Fedora Project mailing list archives (https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OSFFCKXUQ5PAC5UVXY7N6HEHVQ3AC2RG/).