{"action":"Upgrade wasmi to 0.31.1 or later.","affected":[{"fixed":"0.31.1","introduced":"0.15.0"}],"component":"wasmi","cve_ids":["CVE-2024-28123"],"ecosystem":"crates.io","epss":0.00798,"exploited":false,"fixed_versions":["0.31.1"],"ghsa_id":"GHSA-75jp-vq8x-h4cq","id":"tcs_01M5KEV0NXP5E4JK375JVZ8QCD","modified_at":"2026-09-10T03:50:10.185937807Z","published_at":"2024-03-07T17:26:27Z","references":["https://osv.dev/vulnerability/GHSA-75jp-vq8x-h4cq","https://github.com/wasmi-labs/wasmi/security/advisories/GHSA-75jp-vq8x-h4cq","https://nvd.nist.gov/vuln/detail/CVE-2024-28123","https://github.com/wasmi-labs/wasmi/commit/f7b3200e9f3dc9e2cbca966cb255c228453c792f","https://github.com/wasmi-labs/wasmi","https://github.com/wasmi-labs/wasmi/releases/tag/v0.31.1"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-75jp-vq8x-h4cq","url":"https://osv.dev/vulnerability/GHSA-75jp-vq8x-h4cq"}],"summary":"Wasmi Out-of-bounds Write for host to Wasm calls with more than 128 Parameters"}