Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
bytecodealliance/wasm-tools
main @ e6317b4
3
Fixes
0
CVEs
HIGH
Peak severity
Highlights
Sandbox Escape: 2 prior fixes. Scrutinize any change in this area.
wasmparser: most-fixed (2 issues). Treat as high-risk during review.
3 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Sandbox Escape: Validation omissions in atomic instructions (such as allowing operations on immutable shared globals) allow malicious WebAssembly modules to mutate read-only engine state or bypass boundaries. This breaks core WebAssembly sandbox guarantees.
Sandbox Escape: Failing to completely validate memarg offsets during atomic memory instruction parsing allows modules to reference out-of-bounds memory addresses, compromising the host runtime sandbox.
Integer Overflow: Extremely large sizes declared for fixed-length list components can cause integer overflows when downstream runtimes calculate Canonical ABI allocation sizes, leading to memory corruption or denial of service.