WebAssembly Micro Runtime Segmentation Fault Vulnerability in v128.store Instruction

A segmentation fault vulnerability has been identified in WebAssembly Micro Runtime (WAMR) versions through 2.4.3. The issue arises in the classic interpreter when handling SIMD opcodes, specifically during the v128.store instruction, leading to an unhandled segmentation fault and a core dump.

Impact

Exploitation of this vulnerability causes a segmentation fault, resulting in a crash of the application and a core dump.

Reproduction

The vulnerability can be reproduced by saving the WASM file '0_v128.wasm' and running it with the IWASM interpreter version 2.4.3 on Ubuntu 20.04. This can be done by using the command 'iwasm/iwasm --interp -f main corpus/0_v128.wasm', which will trigger the segmentation fault.

Remediation

Users can upgrade to WAMR version 2.4.4, where this vulnerability has been patched.