Browse CVEs

MEDIUM 5.5 CVE-2024-30266 wasmtime is a runtime for WebAssembly. The 19.0.0 release of Wasmtime contains a regression introduced during its development which can lead to a gue… Wasmtime Patch available Fix from $1,6002024-04-04 MEDIUM 5.5 CVE-2023-52284 Bytecode Alliance wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) before 1.3.0 can have an "double free or corruption" error for a valid W… Webassembly Micro Runtime 1.3.0+ Fix from $1,6002023-12-31 HIGH 7.5 CVE-2023-48105 An heap overflow vulnerability was discovered in Bytecode alliance wasm-micro-runtime v.1.2.3 allows a remote attacker to cause a denial of service v… Webassembly Micro Runtime Patch available Fix from $1,9502023-11-22 MEDIUM 5.3 CVE-2023-41880 Wasmtime is a standalone runtime for WebAssembly. Wasmtime versions from 10.0.0 to versions 10.02, 11.0.2, and 12.0.1 contain a miscompilation of the… Wasmtime 10.0.2 / 11.0.2+ Fix from $1,6002023-09-15 HIGH 8.8 CVE-2023-30624 Wasmtime is a standalone runtime for WebAssembly. Prior to versions 6.0.2, 7.0.1, and 8.0.1, Wasmtime's implementation of managing per-instance state… Wasmtime 6.0.2+ Fix from $1,9502023-04-27 CRITICAL 9.9 CVE-2023-26489 wasmtime is a fast and secure runtime for WebAssembly. In affected versions wasmtime's code generator, Cranelift, has a bug on x86_64 targets where a… Cranelift Codegen 0.91.1 / 4.0.1+ Fix from $2,3002023-03-08 CRITICAL 9.8 CVE-2022-39394 Wasmtime is a standalone runtime for WebAssembly. Prior to version 2.0.2, there is a bug in Wasmtime's C API implementation where the definition of t… Wasmtime 1.0.2 / 2.0.2+ Fix from $2,3002022-11-10 HIGH 8.6 CVE-2022-39393 Wasmtime is a standalone runtime for WebAssembly. Prior to versions 2.0.2 and 1.0.2, there is a bug in Wasmtime's implementation of its pooling insta… Wasmtime 1.0.2 / 2.0.2+ Fix from $1,9502022-11-10 HIGH 7.4 CVE-2022-39392 Wasmtime is a standalone runtime for WebAssembly. Prior to version 2.0.2, there is a bug in Wasmtime's implementation of its pooling instance allocat… Wasmtime 1.0.2 / 2.0.2+ Fix from $1,9502022-11-10 HIGH 7.5 CVE-2022-31169 Wasmtime is a standalone runtime for WebAssembly. There is a bug in Wasmtime's code generator, Cranelift, for AArch64 targets where constant divisors… Cranelift Codegen 0.38.1 / 0.85.1+ Fix from $1,9502022-07-22 HIGH 8.8 CVE-2022-31146 Wasmtime is a standalone runtime for WebAssembly. There is a bug in the Wasmtime's code generator, Cranelift, where functions using reference types m… Cranelift Codegen 0.38.2 / 0.85.2+ Fix from $1,9502022-07-21 MEDIUM 5.6 CVE-2022-31104 Wasmtime is a standalone runtime for WebAssembly. In affected versions wasmtime's implementation of the SIMD proposal for WebAssembly on x86_64 conta… Cranelift Codegen 0.38.1 / 0.85.0+ Fix from $1,6002022-06-28 CRITICAL 9.8 CVE-2022-24791 Wasmtime is a standalone JIT-style runtime for WebAssembly, using Cranelift. There is a use after free vulnerability in Wasmtime when both running Wa… Wasmtime 0.34.2 / 0.35.2+ Fix from $2,3002022-03-31 HIGH 8.1 CVE-2022-23636 Wasmtime is an open source runtime for WebAssembly & WASI. Prior to versions 0.34.1 and 0.33.1, there exists a bug in the pooling instance allocator … Wasmtime 0.33.1+ Fix from $1,9502022-02-16 HIGH 8.1 CVE-2021-43790 Lucet is a native WebAssembly compiler and runtime. There is a bug in the main branch of `lucet-runtime` affecting all versions published to crates.i… Lucet after 0.6.1 Fix from $1,9502021-11-30 MEDIUM 6.3 CVE-2021-39218 Wasmtime is an open source runtime for WebAssembly & WASI. In Wasmtime from version 0.26.0 and before version 0.30.0 is affected by a memory unsoundn… Wasmtime 0.30.0+ Fix from $1,6002021-09-17 HIGH 8.8 CVE-2021-32629 Cranelift is an open-source code generator maintained by Bytecode Alliance. It translates a target-independent intermediate representation into execu… Cranelift Codegen 0.73.1+ Fix from $1,9502021-05-24