PkgSeer

Vulnerability RUSTSEC-2022-0096

Unknown

4 years ago

Invalid drop of VMExternRef from partially-initialized instances in the pooling instance allocator

0.0.0 - 0.33.0 and 0.34.0

Summary

Invalid drop of VMExternRef from partially-initialized instances in the pooling instance allocator

Details

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-88xq-w8cq-xfg7. For more information see the GitHub-hosted security advisory.

References

Related Vulnerabilities

Other vulnerabilities affecting the same packages

Wasmtime: Preemption and traps during bulk operations enable breaking internal VM state

46.0.0 - 46.0.1 and 47.0.0 - 47.0.2 GHSA-2hw9-mc66-jc2q

Mis-typed WebAssembly tag imports can lead to GC heap corruption

47.0.0 - 48.0.3 and 49.0.0 - 49.0.1 RUSTSEC-2026-0325

Rooting for GC values live across `try_call` may be missing, causing GC heap corruption

47.0.0 - 48.0.3 and 49.0.0 - 49.0.1 RUSTSEC-2026-0326

Wasmtime component async-lifted callback result count is unvalidated, causing a native stack buffer overflow

39.0.0 - 48.0.3 and 49.0.0 - 49.0.1 RUSTSEC-2026-0327

`call_ref` and exception `catch` can drop some fuel accounting, leading to exponential fuel amplification

47.0.0 - 48.0.2 and 49.0.0 RUSTSEC-2026-0315

View all vulnerabilities for these packages

Impacted packages

wasmtime

Timeline

Published

4 years ago

Fixed (0.34.1)

4 years ago

Fixed (0.33.1)

4 years ago

Last Modified

1 day ago