Lucene search
+L

794 matches found

Debian CVE
Debian CVE
added 2022/06/27 11:20 p.m.75 views

CVE-2022-31104

Wasmtime is a standalone runtime for WebAssembly. In affected versions wasmtime's implementation of the SIMD proposal for WebAssembly on x8664 contained two distinct bugs in the instruction lowerings implemented in Cranelift. The aarch64 implementation of the simd proposal is not affected. The bu...

6.8CVSS5.8AI score0.01625EPSS
SaveExploits0
CVE
CVE
added 2022/06/27 11:20 p.m.102 views

CVE-2022-31104

CVE-2022-31104 concerns Wasmtime’s x86_64 SIMD implementation. Two Cranelift lowering bugs affected i8x16.swizzle and select for v128 inputs: swizzle overwrote the mask input register, potentially corrupting a constant; and select incorrectly handled 128‑bit vectors when the condition was 0, movi...

6.8CVSS5.6AI score0.01625EPSS
SaveExploits0References6Affected Software2
Cvelist
Cvelist
added 2022/06/27 11:20 p.m.65 views

CVE-2022-31104 Miscompilation of `i8x16.swizzle` and `select` with v128 inputs in Wasmtime

Wasmtime is a standalone runtime for WebAssembly. In affected versions wasmtime's implementation of the SIMD proposal for WebAssembly on x8664 contained two distinct bugs in the instruction lowerings implemented in Cranelift. The aarch64 implementation of the simd proposal is not affected. The bu...

4.8CVSS6AI score0.01625EPSS
SaveExploits0References6
OSV
OSV
added 2022/06/27 11:20 p.m.34 views

CVE-2022-31104 Miscompilation of `i8x16.swizzle` and `select` with v128 inputs in Wasmtime

Wasmtime is a standalone runtime for WebAssembly. In affected versions wasmtime's implementation of the SIMD proposal for WebAssembly on x8664 contained two distinct bugs in the instruction lowerings implemented in Cranelift. The aarch64 implementation of the simd proposal is not affected. The bu...

4.8CVSS5.9AI score
SaveExploits0References8
RustSec
RustSec
added 2022/06/27 12:0 p.m.8 views

Miscompilation of `i8x16.swizzle` and `select` with v128 inputs

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-jqwc-c49r-4w2x. For more information see the GitHub-hosted security advisory...

6.8CVSS7AI score0.01625EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2022/06/27 12:0 p.m.16 views

RUSTSEC-2022-0095 Miscompilation of `i8x16.swizzle` and `select` with v128 inputs

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-jqwc-c49r-4w2x. For more information see the GitHub-hosted security advisory...

6.8CVSS6.6AI score0.01625EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/06/27 12:0 a.m.8 views

Wasmtime 安全漏洞

Wasmtime is a bytecode consortium project that is a standalone wasm-optimized runtime for WebAssembly and WASI only. A security vulnerability exists in Wasmtime. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or the vendor announcement...

6.8CVSS5.9AI score0.01625EPSS
SaveExploits0References8
CNVD
CNVD
added 2022/04/02 12:0 a.m.73 views

Wasmtime Resource Management Error Vulnerability

Wasmtime, a Bytecode Consortium project, is a standalone wasm-optimized runtime for WebAssembly and WASI only. a resource management error vulnerability exists in Wasmtime, which stems from the fact that when running Wasm with externrefs and epoch interrupts are enabled in Wasmtime, a use after...

9.8CVSS1.4AI score0.01161EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2022/04/01 1:36 p.m.37 views

Use after free in Wasmtime

There is a use after free vulnerability in Wasmtime when both running Wasm that uses externrefs and enabling epoch interruption in Wasmtime. If you are not explicitly enabling epoch interruption it is disabled by default then you are not affected. If you are explicitly disabling the Wasm referenc...

9.8CVSS1.1AI score0.01161EPSS
SaveExploits0References8Affected Software1
NVD
NVD
added 2022/03/31 11:15 p.m.25 views

CVE-2022-24791

Wasmtime is a standalone JIT-style runtime for WebAssembly, using Cranelift. There is a use after free vulnerability in Wasmtime when both running Wasm that uses externrefs and enabling epoch interruption in Wasmtime. If you are not explicitly enabling epoch interruption it is disabled by default...

9.8CVSS0.01161EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2022/03/31 11:15 p.m.37 views

CVE-2022-24791

Wasmtime is a standalone JIT-style runtime for WebAssembly, using Cranelift. There is a use after free vulnerability in Wasmtime when both running Wasm that uses externrefs and enabling epoch interruption in Wasmtime. If you are not explicitly enabling epoch interruption it is disabled by default...

9.8CVSS7.2AI score0.01161EPSS
SaveExploits0References3
Prion
Prion
added 2022/03/31 11:15 p.m.18 views

Design/Logic Flaw

Wasmtime is a standalone JIT-style runtime for WebAssembly, using Cranelift. There is a use after free vulnerability in Wasmtime when both running Wasm that uses externrefs and enabling epoch interruption in Wasmtime. If you are not explicitly enabling epoch interruption it is disabled by default...

6.8CVSS9.6AI score0.01161EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2022/03/31 11:15 p.m.11 views

UBUNTU-CVE-2022-24791

Wasmtime is a standalone JIT-style runtime for WebAssembly, using Cranelift. There is a use after free vulnerability in Wasmtime when both running Wasm that uses externrefs and enabling epoch interruption in Wasmtime. If you are not explicitly enabling epoch interruption it is disabled by default...

9.8CVSS7.3AI score0.01161EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2022/03/31 11:0 p.m.44 views

CVE-2022-24791 Use after free in Wasmtime

Wasmtime is a standalone JIT-style runtime for WebAssembly, using Cranelift. There is a use after free vulnerability in Wasmtime when both running Wasm that uses externrefs and enabling epoch interruption in Wasmtime. If you are not explicitly enabling epoch interruption it is disabled by default...

8.1CVSS9.9AI score0.01161EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2022/03/31 11:0 p.m.8 views

CVE-2022-24791

Wasmtime is a standalone JIT-style runtime for WebAssembly, using Cranelift. There is a use after free vulnerability in Wasmtime when both running Wasm that uses externrefs and enabling epoch interruption in Wasmtime. If you are not explicitly enabling epoch interruption it is disabled by default...

9.8CVSS9.7AI score0.01161EPSS
SaveExploits0
CVE
CVE
added 2022/03/31 11:0 p.m.133 views

CVE-2022-24791

The CVE refers to Wasmtime (WebAssembly JIT runtime using Cranelift) with a use-after-free vulnerability that occurs when running Wasm code using externrefs while epoch interruption is enabled. The issue is caused by Cranelift failing to emit stack maps for safepoints inside cold blocks, which re...

9.8CVSS9.1AI score0.01161EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2022/03/31 11:0 p.m.21 views

CVE-2022-24791 Use after free in Wasmtime

Wasmtime is a standalone JIT-style runtime for WebAssembly, using Cranelift. There is a use after free vulnerability in Wasmtime when both running Wasm that uses externrefs and enabling epoch interruption in Wasmtime. If you are not explicitly enabling epoch interruption it is disabled by default...

8.1CVSS9.2AI score
SaveExploits0References4
RustSec
RustSec
added 2022/03/31 12:0 p.m.31 views

Use after free with `externref`s and epoch interruption in Wasmtime

Use after free with externrefs and epoch interruption in Wasmtime...

9.8CVSS1.6AI score0.01161EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2022/03/31 12:0 p.m.7 views

RUSTSEC-2022-0016 Use after free with `externref`s and epoch interruption in Wasmtime

Use after free with externrefs and epoch interruption in Wasmtime...

9.8CVSS7.2AI score0.01161EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/03/31 12:0 a.m.10 views

Wasmtime 资源管理错误漏洞

Wasmtime, a Bytecode Consortium project, is a standalone wasm-optimized runtime for WebAssembly and WASI only. a resource management error vulnerability exists in Wasmtime, which stems from the fact that when running Wasm with externrefs and epoch interrupts are enabled in Wasmtime, a use after...

9.8CVSS5.5AI score0.01161EPSS
SaveExploits0References3
Rows per page
Query Builder