Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

wasmtime

7 known vulnerabilities (1 high, 3 medium, 3 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
7 · 1 high, 3 medium, 3 low
Registry
PyPI

Advisories 7

  • Wasmtime has a use-after-free bug after cloning `wasmtime::Linker`

    Affected: through 43.0.0.

  • Wasmtime race condition could lead to WebAssembly control-flow integrity and type safety violations

    Affected: through 19.0.0; through 19.0.1; through 19.0.2; through 20.0.0; through 20.0.1; through 20.0.2; through 21.0.0; through 21.0.1; through 22.0.0; through 23.0.0; through 23.0.1; through 23.0.2; through 24.0.0; through 25.0.0; through 25.0.1.

  • Wasmtime vulnerable to panic when using a dropped extenref-typed element segment

    Affected: through 19.0.0.

  • CVE-2021-39218Medium 6.3

    Out-of-bounds read/write and invalid free with `externref`s and GC safepoints in Wasmtime

    Affected: fixed in 0.30.0; from 0.26.0, fixed in 0.30.0.

  • CVE-2021-39219Medium 6.3

    Wrong type for `Linker`-define functions when used across two `Engine`s

    Affected: fixed in 0.30.0; from 0.26.0, fixed in 0.30.0.

  • CVE-2021-39216Medium 6.3

    Use after free passing `externref`s to Wasm in Wasmtime

    Affected: fixed in 0.30.0; from 0.26.0, fixed in 0.30.0.

  • Memory access due to code generation flaw in Cranelift module

    Affected: fixed in 0.27.0.