Lucene search
+L

6 matches found

RustSec
RustSec
•added 2026/10/02 12:00 p.m.•13 views

Guest can panic host through filesystem timestamp before the epoch on wasip3

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-mr2v-56j5-cmfc For more information see the GitHub-hosted security advisory...

5.8AI score
SaveExploits0Affected Software1
osv_rustsec
osv_rustsec
•added 2026/10/02 12:00 p.m.•17 views

RUSTSEC-2026-0324 Guest can panic host through filesystem timestamp before the epoch on wasip3

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-mr2v-56j5-cmfc For more information see the GitHub-hosted security advisory...

6.2CVSS5.9AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/21 12:00 a.m.•10 views

PT-2026-84066

Wasmtime is a runtime for WebAssembly. Prior to 24.0.11, 36.0.12, 45.0.3, and 46.0.1, wasmtime-wasi hard-link creation and renaming check directory permissions but not matching FilePerms on source and destination preopens, allowing a WASI guest with a read-only source file capability to overwrite...

6.5CVSS5.8AI score
SaveExploits0References10
osv_rustsec
osv_rustsec
•added 2026/08/20 12:00 p.m.•21 views

RUSTSEC-2026-0268 Guest controlled-size host heap allocation through WASIp3 streams

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-x84v-gj2h-g759 For more information see the GitHub-hosted security advisory...

6.9CVSS5.9AI score
SaveExploits0References3
RustSec
RustSec
•added 2026/08/20 12:00 p.m.•19 views

Guest controlled-size host heap allocation through WASIp3 streams

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-x84v-gj2h-g759 For more information see the GitHub-hosted security advisory...

5.9AI score
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/08 12:00 a.m.•11 views

CVE-2026-58494: Improper Preservation of Permissions

Wasmtime is a runtime for WebAssembly. Prior to 24.0.11, 36.0.12, 45.0.3, and 46.0.1, wasmtime-wasi hard-link creation and renaming check directory permissions but not matching FilePerms on source and destination preopens, allowing a WASI guest with a read-only source file capability to overwrite...

6.5CVSS5.8AI score0.00171EPSS
SaveExploits0References3
Rows per page
Query Builder