CVE-2023-46331: 
Python vulnerability analysis and mitigation

WebAssembly wabt (WebAssembly Binary Toolkit) version 1.0.33 contains an Out-of-Bound Memory Read vulnerability in the DataSegment::IsValidRange() function, which can lead to a segmentation fault. The vulnerability was discovered and reported on October 8, 2023 (GitHub Issue).

The vulnerability is classified as an Out-of-bounds Read (CWE-125) with a CVSS v3.1 Base Score of 5.5 (Medium) and vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H. The issue occurs in the DataSegment::IsValidRange() function located in src/interp/interp.cc line 734, which can trigger a segmentation fault due to improper memory access validation (NVD).

When exploited, this vulnerability results in a segmentation fault, which can cause the application to crash. The impact is primarily limited to availability, with no direct impact on confidentiality or integrity of the system (NVD).

The vulnerability requires local access and user interaction to be exploited. It affects the wasm-interp tool within the WebAssembly Binary Toolkit (GitHub Issue).

The vulnerability affects wabt version 1.0.33. Multiple Linux distributions including Debian's bullseye, bookworm, trixie, and sid releases are marked as vulnerable. Users should update to a version newer than 1.0.33 when available (Debian Security).