CVE-2023-52284

Bytecode Alliance wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) before 1.3.0 can have an "double free or corruption" error for a valid WebAssembly module because push_pop_frame_ref_offset is mishandled.

• CWE-415

• https://github.com/bytecodealliance/wasm-micro-runtime/compare/WAMR-1.2.3...WAMR-1.3.0Patch
• https://github.com/bytecodealliance/wasm-micro-runtime/issues/2586Exploit, Issue Tracking, Patch, Vendor Advisory
• https://github.com/bytecodealliance/wasm-micro-runtime/pull/2590Patch
• https://github.com/bytecodealliance/wasm-micro-runtime/compare/WAMR-1.2.3...WAMR-1.3.0Patch
• https://github.com/bytecodealliance/wasm-micro-runtime/issues/2586Exploit, Issue Tracking, Patch, Vendor Advisory
• https://github.com/bytecodealliance/wasm-micro-runtime/pull/2590Patch

Published

Dec 31, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-5227Unrestricted Upload of File with Dangerous Type in GitHub re…9.8
• CVE-2023-52271The wsftprm.sys kernel driver 2.0.0.0 in Topaz Antifraud all…6.5
• CVE-2023-52274member/index/register.html in YzmCMS 6.5 through 7.0 allows …6.1
• CVE-2023-52275Gallery3d on Tecno Camon X CA7 devices allows attackers to v…2.1
• CVE-2023-52277Royal RoyalTSX before 6.0.2.1 allows attackers to cause a de…7.8
• CVE-2023-5228The User Registration WordPress plugin before 3.0.4.2 does n…4.8
• CVE-2023-52285ExamSys 9150244 allows SQL Injection via the /Support/action…7.5
• CVE-2023-52286Tencent tdsqlpcloud through 1.8.5 allows unauthenticated rem…7.5
• CVE-2023-52288An issue was discovered in the flaskcode package through 0.0…7.5
• CVE-2023-52289An issue was discovered in the flaskcode package through 0.0…7.5
• CVE-2023-5229The E2Pdf WordPress plugin before 1.20.20 does not sanitize …4.8
• CVE-2023-52290In streampark-console the list pages(e.g: application pages)…8.1