Use after free passing `externref`s to Wasm in Wasmtime

🗓️ 20 Sep 2021 19:54:05Reported by GitHub Advisory DatabaseType

Use after free bug passing `externref`s to Wasm in Wasmtime. Impact, Patches and Workarounds provide

Reporter	Title	Published	Views	Family All 105
Circl	CVE-2021-39216	18 Sep 202100:23	–	circl
CNNVD	Wasmtime 资源管理错误漏洞	17 Sep 202100:00	–	cnnvd
CVE	CVE-2021-39216	17 Sep 202120:05	–	cve
Cvelist	CVE-2021-39216 Use after free passing `externref`s to Wasm in Wasmtime	17 Sep 202120:05	–	cvelist
Debian CVE	CVE-2021-39216	17 Sep 202120:05	–	debiancve
EUVD	EUVD-2021-0463	7 Oct 202500:30	–	euvd
Fedora	[SECURITY] Fedora 35 Update: rust-gimli-0.25.0-1.fc35	30 Sep 202100:54	–	fedora
Fedora	[SECURITY] Fedora 34 Update: rust-cranelift-wasm-0.77.0-1.fc34	4 Oct 202101:04	–	fedora
Fedora	[SECURITY] Fedora 34 Update: rust-addr2line-0.16.0-1.fc34	4 Oct 202101:04	–	fedora
Fedora	[SECURITY] Fedora 35 Update: rust-object-0.26.2-1.fc35	30 Sep 202100:54	–	fedora

Vulners

Node

Source	Link
github	www.github.com/bytecodealliance/wasmtime/security/advisories/GHSA-v4cp-h94r-m7xf
github	www.github.com/bytecodealliance/wasmtime/commit/101998733b74624cbd348a2366d05760b40181f3
crates	www.crates.io/crates/wasmtime
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-39216
rustsec	www.rustsec.org/advisories/RUSTSEC-2021-0110.html
github	www.github.com/bytecodealliance/wasmtime-py/compare/0.29.0...0.30.0
github	www.github.com/pypa/advisory-database/tree/main/vulns/wasmtime/PYSEC-2021-320.yaml
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/WAVBRYDDUIY2ZR3K3FO4BVYJKIMJ5TP7
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/Z2Z33FTXFQ6EOINVEQIP4DFBG53G5XIY
github	www.github.com/advisories/GHSA-v4cp-h94r-m7xf

19 Nov 2024 18:00Current

6.4Medium risk

Vulners AI Score6.4

CVSS 23.3

CVSS 3.16.3

EPSS0.00297