Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
paritytech/parity-wasm
master @ b760a74
17
Fixes
0
CVEs
HIGH
Peak severity
Highlights
Sandbox Escape: 12 prior fixes. Scrutinize any change in this area.
src/validation/mod.rs: most-fixed (8 issues). Treat as high-risk during review.
15 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Sandbox Escape: Incomplete checks on WebAssembly bytecode instructions (such as 'br_table', 'br_if', and 'unreachable' paths) allow malformed control-flow logic to bypass the validator, causing stack desynchronization and sandbox escapes during execution.
Sandbox Escape: Insufficient validation of module-level structures, such as element segments, table limits, and data section offsets, can cause out-of-bounds memory initialization and memory corruption when loading the module.
Type Confusion: Flaws in tracking stack types during structural block validation (e.g., failing to pop type-validated blocks before parsing 'else' branches) can cause the interpreter to execute code with misaligned type assumptions.