Vulnerability Details CVE-2024-30266
wasmtime is a runtime for WebAssembly. The 19.0.0 release of Wasmtime contains a regression introduced during its development which can lead to a guest WebAssembly module causing a panic in the host runtime. A valid WebAssembly module, when executed at runtime, may cause this panic. This vulnerability has been patched in version 19.0.1.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 3.6%
CVSS Severity
CVSS v3 Score 3.3
References
- https://github.com/bytecodealliance/wasmtime/commit/7f57d0bb0948fa56cc950278d0db230ed10e8664
- https://github.com/bytecodealliance/wasmtime/issues/8281
- https://github.com/bytecodealliance/wasmtime/pull/8018
- https://github.com/bytecodealliance/wasmtime/pull/8283
- https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-75hq-h6g9-h4q5
- https://github.com/bytecodealliance/wasmtime/commit/7f57d0bb0948fa56cc950278d0db230ed10e8664
- https://github.com/bytecodealliance/wasmtime/issues/8281
- https://github.com/bytecodealliance/wasmtime/pull/8018
- https://github.com/bytecodealliance/wasmtime/pull/8283
- https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-75hq-h6g9-h4q5
Products affected by CVE-2024-30266
-
cpe:2.3:a:bytecodealliance:wasmtime:19.0.0