CVE-2023-27117

WebAssembly v1.0.29 was discovered to contain a heap overflow via the component component wabt::Node::operator.

CVSS v3.1

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.32% chance of exploitation in the next 30 days, 24th percentile

Published

2023-03-10

Updated

2025-02-28

Proof-of-concept exploits (1)

• WebAssembly/wabt/issues/1989

References

• CVE Record
• NVD entry

Related

• CVE-2019-15758
• CVE-2019-15759
• CVE-2019-7151
• CVE-2019-7152
• CVE-2019-7153
• CVE-2019-7154