CVE-2024-35418: Kanaka Wac

Medium severity, CVSS 6.2. EPSS: 0.2% chance of exploitation in the next 30 days.

wac commit 385e1 was discovered to contain a heap overflow via the setup_call function at /wac-asan/wa.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted wasm file.

Affected products

• Kanaka Wac: version 2019-10-01 only

Published 2024-11-08. Last modified 2026-06-17.