WebAssembly Wabt Heap-Based Buffer Overflow Vulnerability in Wasm-Decompile Component

A heap-buffer-overflow vulnerability has been identified in WebAssembly Wabt versions through 1.0.39, specifically within the wasm-decompile tool. The issue arises in the function wabt::AST::InsertNode, where memory corruption occurs due to improper handling of a std::vector during reallocation. This vulnerability can be exploited locally, leading to potential memory corruption and Denial-of-Service conditions.

Impact

Exploitation of this vulnerability causes a heap-based buffer overflow, which can lead to memory corruption and potentially allow for arbitrary code execution.

Reproduction

The vulnerability can be reproduced by using the wasm-decompile tool on a specific WebAssembly binary that triggers the heap-buffer-overflow. The tool must be compiled with AddressSanitizer enabled, which will report the memory corruption error when the vulnerable binary is processed.