Vulnerability index

Browse CVEs

47 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Wasmtime MEDIUM 5.5
CVE-2024-30266

wasmtime is a runtime for WebAssembly. The 19.0.0 release of Wasmtime contains a regression introduced during its development which can lead to a gue…

Patch available
Fix from $1,600 2024-04-04
Webassembly Micro Runtime MEDIUM 5.5
CVE-2023-52284

Bytecode Alliance wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) before 1.3.0 can have an "double free or corruption" error for a valid W…

Fix: 1.3.0+
Fix from $1,600 2023-12-31
Webassembly Micro Runtime HIGH 7.5
CVE-2023-48105

An heap overflow vulnerability was discovered in Bytecode alliance wasm-micro-runtime v.1.2.3 allows a remote attacker to cause a denial of service v…

Patch available
Fix from $1,950 2023-11-22
Wasmtime MEDIUM 5.3
CVE-2023-41880

Wasmtime is a standalone runtime for WebAssembly. Wasmtime versions from 10.0.0 to versions 10.02, 11.0.2, and 12.0.1 contain a miscompilation of the…

Fix: 10.0.2 / 11.0.2+
Fix from $1,600 2023-09-15
Wasmtime HIGH 8.8
CVE-2023-30624

Wasmtime is a standalone runtime for WebAssembly. Prior to versions 6.0.2, 7.0.1, and 8.0.1, Wasmtime's implementation of managing per-instance state…

Fix: 6.0.2+
Fix from $1,950 2023-04-27
Cranelift Codegen CRITICAL 9.9
CVE-2023-26489

wasmtime is a fast and secure runtime for WebAssembly. In affected versions wasmtime's code generator, Cranelift, has a bug on x86_64 targets where a…

Fix: 0.91.1 / 4.0.1+
Fix from $2,300 2023-03-08
Wasmtime CRITICAL 9.8
CVE-2022-39394

Wasmtime is a standalone runtime for WebAssembly. Prior to version 2.0.2, there is a bug in Wasmtime's C API implementation where the definition of t…

Fix: 1.0.2 / 2.0.2+
Fix from $2,300 2022-11-10
Wasmtime HIGH 8.6
CVE-2022-39393

Wasmtime is a standalone runtime for WebAssembly. Prior to versions 2.0.2 and 1.0.2, there is a bug in Wasmtime's implementation of its pooling insta…

Fix: 1.0.2 / 2.0.2+
Fix from $1,950 2022-11-10
Wasmtime HIGH 7.4
CVE-2022-39392

Wasmtime is a standalone runtime for WebAssembly. Prior to version 2.0.2, there is a bug in Wasmtime's implementation of its pooling instance allocat…

Fix: 1.0.2 / 2.0.2+
Fix from $1,950 2022-11-10
Cranelift Codegen HIGH 7.5
CVE-2022-31169

Wasmtime is a standalone runtime for WebAssembly. There is a bug in Wasmtime's code generator, Cranelift, for AArch64 targets where constant divisors…

Fix: 0.38.1 / 0.85.1+
Fix from $1,950 2022-07-22
Cranelift Codegen HIGH 8.8
CVE-2022-31146

Wasmtime is a standalone runtime for WebAssembly. There is a bug in the Wasmtime's code generator, Cranelift, where functions using reference types m…

Fix: 0.38.2 / 0.85.2+
Fix from $1,950 2022-07-21
Cranelift Codegen MEDIUM 5.6
CVE-2022-31104

Wasmtime is a standalone runtime for WebAssembly. In affected versions wasmtime's implementation of the SIMD proposal for WebAssembly on x86_64 conta…

Fix: 0.38.1 / 0.85.0+
Fix from $1,600 2022-06-28
Wasmtime CRITICAL 9.8
CVE-2022-24791

Wasmtime is a standalone JIT-style runtime for WebAssembly, using Cranelift. There is a use after free vulnerability in Wasmtime when both running Wa…

Fix: 0.34.2 / 0.35.2+
Fix from $2,300 2022-03-31
Wasmtime HIGH 8.1
CVE-2022-23636

Wasmtime is an open source runtime for WebAssembly & WASI. Prior to versions 0.34.1 and 0.33.1, there exists a bug in the pooling instance allocator …

Fix: 0.33.1+
Fix from $1,950 2022-02-16
Lucet HIGH 8.1
CVE-2021-43790

Lucet is a native WebAssembly compiler and runtime. There is a bug in the main branch of `lucet-runtime` affecting all versions published to crates.i…

Fix: after 0.6.1
Fix from $1,950 2021-11-30
Wasmtime MEDIUM 6.3
CVE-2021-39218

Wasmtime is an open source runtime for WebAssembly & WASI. In Wasmtime from version 0.26.0 and before version 0.30.0 is affected by a memory unsoundn…

Fix: 0.30.0+
Fix from $1,600 2021-09-17
Cranelift Codegen HIGH 8.8
CVE-2021-32629

Cranelift is an open-source code generator maintained by Bytecode Alliance. It translates a target-independent intermediate representation into execu…

Fix: 0.73.1+
Fix from $1,950 2021-05-24