CVE-2024-34249 describes a critical heap buffer overflow vulnerability in wasm3 v0.5.0, specifically within the "DeallocateSlot" function in wasm3/source/m3_compile.c. This flaw allows for a segmentation fault and affects the wasm3_project wasm3 product. Rated with a CVSS score of 9.8 (CRITICAL), this vulnerability is remotely exploitable with low attack complexity and no user interaction required, potentially leading to complete compromise of confidentiality, integrity, and availability. Its FAUCET Risk Score is 80/100, indicating significant risk. Currently, there is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit, Nuclei, or ExploitDB. The vulnerability has also received minimal community discussion or media coverage, which is typical for the majority of CVEs.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
0.5.0CPE matchmatch criteria | cpe:2.3:a:wasm3_project:wasm3:0.5.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.