Lucene search

K
osvGoogleOSV:RUSTSEC-2021-0067
HistoryMay 21, 2021 - 12:00 p.m.

Memory access due to code generation flaw in Cranelift module

2021-05-2112:00:00
Google
osv.dev
7
cranelift
x64
memory access
code generation
security advisory
vulnerability
webassembly
sandbox escape
upgrade
github
advisory
software

EPSS

0.001

Percentile

34.7%

There is a bug in 0.73.0 of the Cranelift x64 backend that can create a
scenario that could result in a potential sandbox escape in a WebAssembly
module. Users of versions 0.73.0 of Cranelift should upgrade to either 0.73.1
or 0.74 to remediate this vulnerability. Users of Cranelift prior to 0.73.0
should update to 0.73.1 or 0.74 if they were not using the old default backend.

More details can be found in the GitHub Security Advisory at:

<https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-hpqh-2wqx-7qp5&gt;

EPSS

0.001

Percentile

34.7%

Related for OSV:RUSTSEC-2021-0067