CVE-2024-35419
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Nov 8, 2024
Updated: Nov 12, 2024
CWE ID 120
Summary
CVE-2024-35419 is a newly discovered heap overflow vulnerability affecting the wac commit 385e1. The issue lies within the load_module function located at /wac-asan/wa.c. An adversary can exploit this vulnerability by crafting a malicious wasm file, leading to a Denial of Service (DoS) attack. This issue poses a potential threat to systems utilizing the affected wac component and requires immediate attention for patching or mitigation.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- WAC