CVE-2024-25431: High severity bytecodealliance Webassembly Micro Runtime vulnerability
An issue in bytecodealliance wasm-micro-runtime before v.b3f728c and fixed in commit 06df58f allows a remote attacker to escalate privileges via a crafted file to the checkwasabicompatibility function.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
bytecodealliance/wasm-micro-runtimeto a version that resolves this vulnerability.Patch 06df58f
Event History
Frequently Asked Questions
What is the severity of CVE-2024-25431?
CVE-2024-25431 has a severity rating that indicates a potential for privilege escalation if exploited.
How do I fix CVE-2024-25431?
To fix CVE-2024-25431, update the WebAssembly Micro Runtime to version 1.3.2 or later.
Who is affected by CVE-2024-25431?
CVE-2024-25431 affects users of bytecodealliance's WebAssembly Micro Runtime prior to version 1.3.2.
What functionality is impacted by CVE-2024-25431?
The vulnerability in CVE-2024-25431 impacts the check_was_abi_compatibility function, allowing for privilege escalation.
When was CVE-2024-25431 disclosed?
CVE-2024-25431 was disclosed prior to the fix being implemented in commit 06df58f.