Vulnerabilities

TI-2023-11636 CVE-2023-26489 · GHSA-ff4p-7xrq-q5r8

Guest-controlled out-of-bounds read/write on x86_64 in wasmtime

MEDIUM 45

wasmtime is a fast and secure runtime for WebAssembly.

CVSS 3.1CRITICAL 10.0 Network Low privileges No interaction EPSS 0.01251 Published 2023-03-08 Fixed in 4.0.1, 5.0.1 +4 CWE-125

TI-2023-12205 CVE-2023-27477 · GHSA-xm67-587q-r2vw

LOW 21

wasmtime is a fast and secure runtime for WebAssembly.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00624 Published 2023-03-08 Fixed in 4.0.1, 5.0.1 +4 CWE-193

TI-2022-13211 CVE-2022-31169 · GHSA-7f6x-jwh5-m9r4

LOW 35

Wasmtime is a standalone runtime for WebAssembly.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00924 Published 2022-07-21 Fixed in 0.38.2, 0.85.2 CWE-682

TI-2022-13189 CVE-2022-31146 · GHSA-5fhj-g3p3-pq9g

MEDIUM 41

Wasmtime is a standalone runtime for WebAssembly.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0125 Published 2022-07-20 Fixed in 0.38.2, 0.85.2 CWE-416

TI-2022-13148 CVE-2022-31104 · GHSA-jqwc-c49r-4w2x

LOW 29

Wasmtime is a standalone runtime for WebAssembly.

CVSS 3.1MEDIUM 5.6 Network No auth No interaction EPSS 0.01785 Published 2022-06-27 Fixed in 0.38.1, 0.85.1 CWE-682

TI-2021-12298 CVE-2021-32629 · GHSA-hpqh-2wqx-7qp5

LOW 38

Cranelift is an open-source code generator maintained by Bytecode Alliance.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00455 Published 2021-05-24 Fixed in 0.73.1, 0.27.0 CWE-788