CVE-2023-27117

HIGH

WebAssembly v1.0.29 was discovered to contain a heap overflow via the component component wabt::Node::operator.

Affects 1 product across 1 vendor.

CVSS 3.17.8
EPSS0.3%
Percentile23th
PatchUnknown
CVSS Vector — Plain English Requires local access, low complexity, no authentication required, requires user interaction, impact contained to the vulnerable component, full confidentiality impact, full integrity impact, full availability impact.
CWE Weakness Definitions
CWE-787: Out-of-Bounds Write

Software writes data past buffer boundaries, corrupting memory and potentially enabling code execution.

◆ AI Analysis — automated analysis, not human-reviewed

A heap overflow vulnerability was identified in WebAssembly v1.0.29 through the wabt::Node::operator component, which could lead to arbitrary code execution.

BSID: BS-2023-GLOBAL-348739-H • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2023-27117?
A heap overflow vulnerability was identified in WebAssembly v1.0.29 through the wabt::Node::operator component, which could lead to arbitrary code execution.
What is the CVSS score for CVE-2023-27117?
CVE-2023-27117 has CVSS 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS: 0.3%.
Is CVE-2023-27117 actively exploited?
No confirmed active exploitation of CVE-2023-27117 as of 2026-05-30.
How do I remediate CVE-2023-27117?
Priority: HIGH.
What systems are affected by CVE-2023-27117?
CVE-2023-27117 affects Webassembly Webassembly.
Vulnerability Details
CVE IDCVE-2023-27117
BSIDBS-2023-GLOBAL-348739-H BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Published2023-03-10
Last Modified2024-11-21
ICS Relevance15%
Weakness (CWE)
Out-of-Bounds Write
SourceNVD
Official Description

WebAssembly v1.0.29 was discovered to contain a heap overflow via the component component wabt::Node::operator.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

The vulnerability is triggered by a specific sequence of operations within the wabt::Node::operator component, potentially allowing an attacker to exploit the heap overflow to execute arbitrary code.

Exploitation Likelihood: MEDIUM

Affected Products
VendorProductAffected Versions
Webassembly Webassembly 1.0.29
Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 1316 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceMEDIUM
Enriched At2026-05-24
SHA-512 Audit Hashb00f9362eb3d3bf92c2b72f4c1fae512e382762e20a801e4a5969cf9dce1b34123d207f60b5b39e9aa5646e0117e6ee779dd0dc51d6a359bbb304b54b95dfcf9
Related CVEs affecting Webassembly
CVE-2024-32980 9.1 Spin is the developer tool for building and running serverless applications p... CVE-2025-2368 8.8 A vulnerability was found in WebAssembly wabt 1.0.36 and classified as critic... CVE-2025-15411 7.8 A weakness has been identified in WebAssembly wabt up to 1.0.39. This vulnera... CVE-2022-43281 7.8 wasm-interp v1.0.29 was discovered to contain a heap overflow via the compone... CVE-2025-15412 7.8 A security vulnerability has been detected in WebAssembly wabt up to 1.0.39. ...
View all Webassembly CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →