Lucene search

K
rustsecRustsecRUSTSEC-2021-0067
HistoryMay 21, 2021 - 12:00 p.m.

Memory access due to code generation flaw in Cranelift module

2021-05-2112:00:00
rustsec.org
3

0.001 Low

EPSS

Percentile

34.9%

There is a bug in 0.73.0 of the Cranelift x64 backend that can create a
scenario that could result in a potential sandbox escape in a WebAssembly
module. Users of versions 0.73.0 of Cranelift should upgrade to either 0.73.1
or 0.74 to remediate this vulnerability. Users of Cranelift prior to 0.73.0
should update to 0.73.1 or 0.74 if they were not using the old default backend.

More details can be found in the GitHub Security Advisory at:

<https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-hpqh-2wqx-7qp5&gt;

CPENameOperatorVersion
cranelift-codegenlt0.73.1

0.001 Low

EPSS

Percentile

34.9%

Related for RUSTSEC-2021-0067