Recommended action

Monitor this advisory for an available fix and review any installs of the affected package.

hol-guard supply-chain scan

What this means

pywasm3 contains a heap buffer overflow which leads to segmentation fault affects pywasm3 (pip). Severity is critical. wasm3 v0.5.0 was discovered to contain a heap buffer overflow which leads to segmentation fault via the function "DeallocateSlot" in wasm3/source/m3_compile.c.

AI coding agents often install or upgrade packages automatically in pip. A critical vulnerability in a dependency can be pulled into a project through a normal install or update without a human reviewing the change, expanding the blast radius from a single package to every agent workspace that depends on it.

Affected software

Evidence and references

• https://nvd.nist.gov/vuln/detail/CVE-2024-34249

Recommended action

Monitor this advisory for an available fix and review any installs of the affected package.

hol-guard supply-chain scan

What this means

pywasm3 contains a heap buffer overflow which leads to segmentation fault affects pywasm3 (pip). Severity is critical. wasm3 v0.5.0 was discovered to contain a heap buffer overflow which leads to segmentation fault via the function "DeallocateSlot" in wasm3/source/m3_compile.c.

AI coding agents often install or upgrade packages automatically in pip. A critical vulnerability in a dependency can be pulled into a project through a normal install or update without a human reviewing the change, expanding the blast radius from a single package to every agent workspace that depends on it.

Affected software

Evidence and references

• https://nvd.nist.gov/vuln/detail/CVE-2024-34249