Lucene search
K

42 matches found

SUSE CVE
SUSE CVE
added 2026/04/13 11:26 p.m.5 views

SUSE CVE-2026-34945

Wasmtime is a runtime for WebAssembly. From 25.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime's Winch compiler contains a bug where a 64-bit table, part of the memory64 proposal of WebAssembly, incorrectly translated the table.size instruction. This bug could lead to disclosing data on the...

6.3CVSS5.8AI score0.00014EPSS
Exploits0References3
EUVD
EUVD
added 2026/04/09 8:23 p.m.4 views

EUVD-2026-21024

Wasmtime has host data leakage with 64-bit tables and Winch...

2.3CVSS5.9AI score0.00014EPSS
Exploits0References1
OSV
OSV
added 2026/04/09 8:23 p.m.2 views

GHSA-M9W2-8782-2946 Wasmtime has host data leakage with 64-bit tables and Winch

Impact Wasmtime's Winch compiler contains a bug where a 64-bit table, part of the memory64 proposal of WebAssembly, incorrectly translated the table.size instruction. This bug could lead to disclosing data on the host's stack to WebAssembly guests. The host's stack can possibly contain sensitive...

6.5CVSS5.8AI score0.00014EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2026/04/09 8:23 p.m.7 views

Wasmtime has host data leakage with 64-bit tables and Winch

Impact Wasmtime's Winch compiler contains a bug where a 64-bit table, part of the memory64 proposal of WebAssembly, incorrectly translated the table.size instruction. This bug could lead to disclosing data on the host's stack to WebAssembly guests. The host's stack can possibly contain sensitive...

6.5CVSS5.8AI score0.00014EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2026/04/09 7:16 p.m.1 views

UBUNTU-CVE-2026-34945

Wasmtime is a runtime for WebAssembly. From 25.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime's Winch compiler contains a bug where a 64-bit table, part of the memory64 proposal of WebAssembly, incorrectly translated the table.size instruction. This bug could lead to disclosing data on the...

6.5CVSS5.8AI score0.00014EPSS
Exploits0References3
CVE
CVE
added 2026/04/09 6:40 p.m.6 views

CVE-2026-34945

Wasmtime (Winch) vulnerability: a bug in the 64-bit memory64 table.size translation could disclose data from the host stack to WebAssembly guests. Affected builds range 25.0.0 through just before 36.0.7, 42.0.2, and 43.0.1. Root cause: return value of table.size was statically typed as 32‑bit ins...

6.5CVSS5.9AI score0.00014EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/04/09 12:0 a.m.3 views

PT-2026-31686

Name of the Vulnerable Software and Affected Versions Wasmtime versions 25.0.0 through 36.0.6, 42.0.2, and 43.0.1 Description Wasmtime's Winch compiler has a flaw in how it handles the table.size instruction with 64-bit tables, part of the WebAssembly memory64 proposal. This can lead to the...

6.5CVSS5.7AI score0.00014EPSS
Exploits0References16
CNNVD
CNNVD
added 2026/04/09 12:0 a.m.2 views

wasmtime 安全漏洞

Wasmtime is a lightweight WebAssembly runtime open source by the Bytecode Alliance. Versions of Wastime prior to 25.0.0, 36.0.7, 42.0.2, and 43.0.1 contained security vulnerabilities. These vulnerabilities stemmed from the Winch compiler incorrectly translating the table.size instruction, which i...

6.5CVSS5.8AI score0.00014EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/04 4:4 p.m.4 views

CVE-2026-23054

In the Linux kernel, the following vulnerability has been resolved: net: hvnetvsc: reject RSS hash key programming without RX indirection table RSS configuration requires a valid RX indirection table. When the device reports a single receive queue, rndisfilterdeviceadd does not allocate an...

5.2AI score0.00027EPSS
Exploits0References6Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2017-14231

Malware in sbrugna...

8.8CVSS9.1AI score0.01484EPSS
Exploits0References12
Tenable Nessus
Tenable Nessus
added 2025/08/22 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2021-37220

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MuPDF through 1.18.1 has an out-of-bounds write because the cached color converter does not properly consider the maximum key size of a hash table. This can, fo...

5.5CVSS5.6AI score0.00206EPSS
Exploits1References2
Microsoft CVE
Microsoft CVE
added 2025/05/05 7:0 a.m.2 views

remoteproc: core: Clear table_sz when rproc_shutdown

...

5.5CVSS7.4AI score0.00024EPSS
Exploits0
OSV
OSV
added 2025/04/18 7:1 a.m.3 views

CVE-2025-38152 remoteproc: core: Clear table_sz when rproc_shutdown

In the Linux kernel, the following vulnerability has been resolved: remoteproc: core: Clear tablesz when rprocshutdown There is case as below could trigger kernel dump: Use U-Boot to start remote processorrproc with resource table published to a fixed address by rproc. After Kernel boots up, stop...

5.5CVSS6.1AI score0.00024EPSS
Exploits0References11
CNNVD
CNNVD
added 2025/04/18 12:0 a.m.1 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from rprocshutdown not clearing tablesz, which could lead to memory corruption...

5.5CVSS6.5AI score0.00024EPSS
Exploits0References8
CNNVD
CNNVD
added 2025/03/27 12:0 a.m.5 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not properly handling mokvar table size calculations, which could lead to memory mapping failures...

5.5CVSS6.5AI score0.00018EPSS
Exploits0References7
CNNVD
CNNVD
added 2025/01/19 12:0 a.m.1 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not limiting the size of the hash table...

5.5CVSS6.5AI score0.00033EPSS
Exploits0References6
OSV
OSV
added 2024/05/07 3:15 p.m.1 views

UBUNTU-CVE-2024-32663

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.5 and 6.0.19, a small amount of HTTP/2 traffic can lead to Suricata using a large amount of memory. The issue has been addressed in Suricata 7.0.5 and 6.0.19...

7.5CVSS5.8AI score0.00357EPSS
Exploits0References9
OSV
OSV
added 2024/02/23 11:7 a.m.4 views

OESA-2024-1179 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: Transmit requests in Xen's virtual network protocol can consist of multiple parts. While not really useful, except for the initial part any of them may be of zero length, i.e. carry no data at all. Besides a certain initial porti...

7.8CVSS7AI score0.85106EPSS
Exploits15References4
SUSE CVE
SUSE CVE
added 2023/02/15 6:19 a.m.1 views

SUSE CVE-2005-0177

nlsascii.c in Linux before 2.6.8.1 uses an incorrect table size, which allows attackers to cause a denial of service kernel crash via a buffer overflow...

7.8CVSS7AI score0.00739EPSS
Exploits0References3
OSV
OSV
added 2022/04/24 10:6 p.m.8 views

GSD-2022-1002059 fs: fix fd table size alignment properly

fs: fix fd table size alignment properly This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.110 by commit...

7.2AI score
Exploits0
Rows per page
Query Builder