wasmtime vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2023-41880Lowwasmtime: Miscompilation of wasm `i64x2.shr_s` instruction with constant input on x86_64 CVE-2023-30624Lowwasmtime: Undefined Behavior in Rust runtime functions CVE-2023-26489Criticalwasmtime: wasmtime vulnerable to guest-controlled out-of-bounds read/write on x86_64 CVE-2023-27477Lowwasmtime: wasmtime vulnerable to miscompilation of `i8x16.select` with the same inputs on x86_64 CVE-2022-39393Highwasmtime: Wasmtime may have data leakage between instances in the pooling allocator CVE-2022-39392Mediumwasmtime: Wasmtime out of bounds read/write with zero-memory-pages configuration CVE-2022-31169Mediumwasmtime: Cranelift vulnerable to miscompilation of constant values in division on AArch64 CVE-2022-31146Mediumwasmtime: Wasmtime vulnerable to Use After Free with `externref`s CVE-2022-31104Mediumwasmtime: Miscompilation of `i8x16.swizzle` and `select` with v128 inputs CVE-2022-24791Highwasmtime: Use after free in Wasmtime CVE-2022-23636Mediumwasmtime: Invalid drop of partially-initialized instances in the pooling instance allocator for modules with…CVE-2021-39219Mediumwasmtime: Wrong type for `Linker`-define functions when used across two `Engine`s CVE-2021-39218Mediumwasmtime: Out-of-bounds read/write and invalid free with `externref`s and GC safepoints in Wasmtime CVE-2021-39216Mediumwasmtime: Use after free passing `externref`s to Wasm in Wasmtime CVE-2021-32629Highcranelift-codegen: Memory access due to code generation flaw in Cranelift module

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo