Bytecodealliance

Cranelift-codegen

6 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
  • EPSS 0.26%
  • Published 08.03.2023 21:15:11
  • Last modified 21.11.2024 07:52:58

wasmtime is a fast and secure runtime for WebAssembly. Wasmtime's code generation backend, Cranelift, has a bug on x86_64 platforms for the WebAssembly `i8x16.select` instruction which will produce the wrong results when the same operand is provided ...

  • EPSS 1.62%
  • Published 08.03.2023 20:15:09
  • Last modified 21.11.2024 07:51:37

wasmtime is a fast and secure runtime for WebAssembly. In affected versions wasmtime's code generator, Cranelift, has a bug on x86_64 targets where address-mode computation mistakenly would calculate a 35-bit effective address instead of WebAssembly'...

  • EPSS 0.47%
  • Published 22.07.2022 04:15:14
  • Last modified 21.11.2024 07:04:02

Wasmtime is a standalone runtime for WebAssembly. There is a bug in Wasmtime's code generator, Cranelift, for AArch64 targets where constant divisors can result in incorrect division results at runtime. This affects Wasmtime prior to version 0.38.2 a...

  • EPSS 0.44%
  • Published 21.07.2022 04:15:11
  • Last modified 21.11.2024 07:03:59

Wasmtime is a standalone runtime for WebAssembly. There is a bug in the Wasmtime's code generator, Cranelift, where functions using reference types may be incorrectly missing metadata required for runtime garbage collection. This means that if a GC h...

  • EPSS 0.87%
  • Published 28.06.2022 00:15:08
  • Last modified 21.11.2024 07:03:54

Wasmtime is a standalone runtime for WebAssembly. In affected versions wasmtime's implementation of the SIMD proposal for WebAssembly on x86_64 contained two distinct bugs in the instruction lowerings implemented in Cranelift. The aarch64 implementat...

Exploit
  • EPSS 0.07%
  • Published 24.05.2021 16:15:08
  • Last modified 21.11.2024 06:07:24

Cranelift is an open-source code generator maintained by Bytecode Alliance. It translates a target-independent intermediate representation into executable machine code. There is a bug in 0.73 of the Cranelift x64 backend that can create a scenario th...