PkgSeer

Vulnerability RUSTSEC-2021-0067

High Risk

5 years ago

Memory access due to code generation flaw in Cranelift module

0.14.0 - 0.16.1 and 0.17.0 - 0.73.0

Summary

Memory access due to code generation flaw in Cranelift module

Details

There is a bug in 0.73.0 of the Cranelift x64 backend that can create a scenario that could result in a potential sandbox escape in a WebAssembly module. Users of versions 0.73.0 of Cranelift should upgrade to either 0.73.1 or 0.74 to remediate this vulnerability. Users of Cranelift prior to 0.73.0 should update to 0.73.1 or 0.74 if they were not using the old default backend.

More details can be found in the GitHub Security Advisory at:

https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-hpqh-2wqx-7qp5

References

Related Vulnerabilities

Other vulnerabilities affecting the same packages

wasmtime vulnerable to guest-controlled out-of-bounds read/write on x86_64

0.84.0 - 0.91.0 and 0.92.0 and 0.93.0 GHSA-ff4p-7xrq-q5r8

wasmtime vulnerable to miscompilation of `i8x16.select` with the same inputs on x86_64

0.88.0 - 0.91.0 and 0.92.0 and 0.93.0 GHSA-xm67-587q-r2vw

Cranelift vulnerable to miscompilation of constant values in division on AArch64

0.14.0 - 0.16.1 and 0.17.0 - 0.85.1 GHSA-7f6x-jwh5-m9r4

Wasmtime vulnerable to Use After Free with `externref`s

0.84.0 - 0.85.1 GHSA-5fhj-g3p3-pq9g

Miscompilation of `i8x16.swizzle` and `select` with v128 inputs

0.14.0 - 0.16.1 and 0.17.0 - 0.85.0 GHSA-jqwc-c49r-4w2x

View all vulnerabilities for these packages

Impacted packages

cranelift-codegen

Timeline

Published

5 years ago

Fixed (0.73.1)

5 years ago

Last Modified

1 hour ago