CVE-2024-27529

HIGH

wasm3 139076a - Out-of-bounds Read in Read_utf8

Title source: llm

wasm3 139076a contains memory leaks in Read_utf8.

Core 2

Core References

Third Party Advisory

Exploit, Issue Tracking

CVSS v3 8.4

EPSS 0.0027

EPSS Percentile 17.8%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vulnrichment

Exploitation poc

Automatable no

Technical Impact total

CWE

CWE-125

Status published

Products (4)

crates.io/wasm3 0 - 0.3.1crates.io

pypi/pywasm3 0 - 0.5.0PyPI

SwiftURL/github.com/shareup/wasm-interpreter-apple 0 - 0.8.1SwiftURL

wasm3_project/wasm3 139076a

Published Nov 08, 2024

Tracked Since Feb 18, 2026