Wasmtime 安全漏洞

wasmtime is a lightweight WebAssembly runtime open-sourced by the Bytecode Alliance. A security vulnerability exists in Wasmtime version 37.0.0 and 37.0.1, which stems from a memory management flaw in the C/C++ API for anyref or externref values that could lead to a memory leak...

PT-2025-41158

Name of the Vulnerable Software and Affected Versions Wasmtime versions 37.0.0 through 37.0.1 Description Wasmtime, a runtime for WebAssembly, contains memory leaks within its C/C++ API when utilizing bindings for anyref or externref WebAssembly values. This issue stems from a regression introduc...

EUVD-2024-1137

Malicious code in bioql PyPI...

EUVD-2025-29395

Malicious code in bioql PyPI...

EUVD-2025-21918

Malicious code in bioql PyPI...

EUVD-2024-3109

Malicious code in bioql PyPI...

EUVD-2023-1143

Malicious code in bioql PyPI...

EUVD-2022-7220

Malicious code in bioql PyPI...

EUVD-2024-3231

Malicious code in bioql PyPI...

EUVD-2022-1747

Malicious code in bioql PyPI...

EUVD-2022-6243

Malicious code in bioql PyPI...

EUVD-2023-0998

Malicious code in bioql PyPI...

EUVD-2024-0651

Malicious code in bioql PyPI...

EUVD-2022-7455

Malicious code in bioql PyPI...

Use after free in Wasmtime

...

Miscompilation of `i8x16.swizzle` and `select` with v128 inputs in Wasmtime

...

Linux Distros Unpatched Vulnerability : CVE-2024-30266

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wasmtime is a runtime for WebAssembly. The 19.0.0 release of Wasmtime contains a regression introduced during its development which can lead to a guest...

Linux Distros Unpatched Vulnerability : CVE-2024-47813

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Wasmtime is an open source runtime for WebAssembly. Under certain concurrent event orderings, a wasmtime::Engine's internal type registry was susceptible to...

Linux Distros Unpatched Vulnerability : CVE-2024-47763

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Wasmtime is an open source runtime for WebAssembly. Wasmtime's implementation of WebAssembly tail calls combined with stack traces can result in a runtime crash...

Linux Distros Unpatched Vulnerability : CVE-2022-31169

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Wasmtime is a standalone runtime for WebAssembly. There is a bug in Wasmtime's code generator, Cranelift, for AArch64 targets where constant divisors can result...