What’s Vulnerable › Vulnerabilities

CVE-2023-48105

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-11-22 · updated 2026-07-09
• Weakness: CWE-787

Description

An heap overflow vulnerability was discovered in Bytecode alliance wasm-micro-runtime v.1.2.3 allows a remote attacker to cause a denial of service via the wasm_loader_prepare_bytecode function in core/iwasm/interpreter/wasm_loader.c.

Affected products

• bytecodealliance wasm-micro-runtime: 1.2.3

References

• https://github.com/bytecodealliance/wasm-micro-runtime/issues/2726
• https://github.com/bytecodealliance/wasm-micro-runtime/pull/2734/commits/4785d91b16dd49c09a96835de2d9c7b077543fa4
• https://github.com/bytecodealliance/wasm-micro-runtime/issues/2726
• https://github.com/bytecodealliance/wasm-micro-runtime/pull/2734/commits/4785d91b16dd49c09a96835de2d9c7b077543fa4

Get alerted when CVE-2023-48105 or the next vulnerability affects your stack