GHSA-mhg9-mm8c-c683

Source

https://github.com/advisories/GHSA-mhg9-mm8c-c683

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/11/GHSA-mhg9-mm8c-c683/GHSA-mhg9-mm8c-c683.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-mhg9-mm8c-c683

Aliases

CVE-2024-27528
PYSEC-2024-304

Published

2024-11-09T00:30:42Z

Modified

2026-06-09T19:26:10Z

Severity

8.4 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

pywasm3 has an Invalid Memory Read, Leading to DoS and Potential Code Execution

Details

wasm3 139076a suffers from Invalid Memory Read, leading to DoS and potential Code Execution.

Database specific

{
    "cwe_ids":  [
        "CWE-125"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2026-06-09T19:05:05Z",
    "nvd_published_at":  "2024-11-08T22:15:15Z",
    "severity":  "HIGH"
}

References

Affected packages

PyPI / pywasm3

Package

Name: pywasm3; View open source insights on deps.dev
Purl: pkg:pypi/pywasm3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Last Affected

0.5.0

Affected versions

0.*

0.0.1

0.0.2

0.4.8

0.4.9

0.5.0

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/11/GHSA-mhg9-mm8c-c683/GHSA-mhg9-mm8c-c683.json"