CVE-2024-27530: pywasm3 contains a Use-After-Free in ForEachModule

November 9, 2024 (updated June 9, 2026)

wasm3 139076a contains a Use-After-Free in ForEachModule.

References

gist.github.com/haruki3hhh/94dd274487b58e037bcc8839dc88b203
github.com/advisories/GHSA-46r6-92jg-22jg
github.com/pypa/advisory-database/tree/main/vulns/pywasm3/PYSEC-2024-306.yaml
github.com/wasm3/pywasm3/blob/main/wasm3/m3_env.c
github.com/wasm3/wasm3/issues/458
nvd.nist.gov/vuln/detail/CVE-2024-27530

Code Behaviors & Features

Detect and mitigate CVE-2024-27530 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →