What’s Vulnerable › Vulnerabilities

CVE-2022-28966

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-04-16 · updated 2026-06-17
• Weakness: CWE-787

Description

Wasm3 0.5.0 has a heap-based buffer overflow in NewCodePage in m3_code.c (called indirectly from Compile_BranchTable in m3_compile.c).

Affected products

• wasm3: 0.5.0

References

• https://github.com/wasm3/wasm3/issues/320
• https://github.com/wasm3/wasm3/issues/320

Get alerted when CVE-2022-28966 or the next vulnerability affects your stack