Bytecodealliance

Wasmtime

22 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
  • EPSS 1.62%
  • Published 08.03.2023 20:15:09
  • Last modified 21.11.2024 07:51:37

wasmtime is a fast and secure runtime for WebAssembly. In affected versions wasmtime's code generator, Cranelift, has a bug on x86_64 targets where address-mode computation mistakenly would calculate a 35-bit effective address instead of WebAssembly'...

  • EPSS 0.04%
  • Published 10.11.2022 20:15:11
  • Last modified 21.11.2024 07:18:12

Wasmtime is a standalone runtime for WebAssembly. Prior to version 2.0.2, there is a bug in Wasmtime's C API implementation where the definition of the `wasmtime_trap_code` does not match its declared signature in the `wasmtime/trap.h` header file. T...

  • EPSS 0.1%
  • Published 10.11.2022 20:15:11
  • Last modified 02.05.2025 13:15:45

Wasmtime is a standalone runtime for WebAssembly. Prior to versions 2.0.2 and 1.0.2, there is a bug in Wasmtime's implementation of its pooling instance allocator where when a linear memory is reused for another instance the initial heap snapshot of ...

  • EPSS 0.1%
  • Published 10.11.2022 20:15:11
  • Last modified 21.11.2024 07:18:11

Wasmtime is a standalone runtime for WebAssembly. Prior to version 2.0.2, there is a bug in Wasmtime's implementation of its pooling instance allocator when the allocator is configured to give WebAssembly instances a maximum of zero pages of memory. ...

  • EPSS 0.47%
  • Published 22.07.2022 04:15:14
  • Last modified 21.11.2024 07:04:02

Wasmtime is a standalone runtime for WebAssembly. There is a bug in Wasmtime's code generator, Cranelift, for AArch64 targets where constant divisors can result in incorrect division results at runtime. This affects Wasmtime prior to version 0.38.2 a...

  • EPSS 0.44%
  • Published 21.07.2022 04:15:11
  • Last modified 21.11.2024 07:03:59

Wasmtime is a standalone runtime for WebAssembly. There is a bug in the Wasmtime's code generator, Cranelift, where functions using reference types may be incorrectly missing metadata required for runtime garbage collection. This means that if a GC h...

  • EPSS 0.87%
  • Published 28.06.2022 00:15:08
  • Last modified 21.11.2024 07:03:54

Wasmtime is a standalone runtime for WebAssembly. In affected versions wasmtime's implementation of the SIMD proposal for WebAssembly on x86_64 contained two distinct bugs in the instruction lowerings implemented in Cranelift. The aarch64 implementat...

  • EPSS 0.39%
  • Published 31.03.2022 23:15:08
  • Last modified 21.11.2024 06:51:06

Wasmtime is a standalone JIT-style runtime for WebAssembly, using Cranelift. There is a use after free vulnerability in Wasmtime when both running Wasm that uses externrefs and enabling epoch interruption in Wasmtime. If you are not explicitly enabli...

  • EPSS 0.18%
  • Published 16.02.2022 22:15:07
  • Last modified 21.11.2024 06:48:59

Wasmtime is an open source runtime for WebAssembly & WASI. Prior to versions 0.34.1 and 0.33.1, there exists a bug in the pooling instance allocator in Wasmtime's runtime where a failure to instantiate an instance for a module that defines an `extern...

  • EPSS 0.18%
  • Published 17.09.2021 21:15:07
  • Last modified 21.11.2024 06:18:55

Wasmtime is an open source runtime for WebAssembly & WASI. In Wasmtime from version 0.26.0 and before version 0.30.0 is affected by a memory unsoundness vulnerability. There was an invalid free and out-of-bounds read and write bug when running Wasm t...