PkgSeer

Vulnerability RUSTSEC-2023-0092

Low Risk

3 years ago

Undefined Behavior in Rust runtime functions

0.0.0 - 6.0.1 and 7.0.0 and 8.0.0

Summary

Undefined Behavior in Rust runtime functions

Details

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-ch89-5g45-qwc7. For more information see the GitHub-hosted security advisory.

References

Related Vulnerabilities

Other vulnerabilities affecting the same packages

Wasmtime: Preemption and traps during bulk operations enable breaking internal VM state

46.0.0 - 46.0.1 and 47.0.0 - 47.0.2 GHSA-2hw9-mc66-jc2q

Mis-typed WebAssembly tag imports can lead to GC heap corruption

47.0.0 - 48.0.3 and 49.0.0 - 49.0.1 RUSTSEC-2026-0325

Rooting for GC values live across `try_call` may be missing, causing GC heap corruption

47.0.0 - 48.0.3 and 49.0.0 - 49.0.1 RUSTSEC-2026-0326

Wasmtime component async-lifted callback result count is unvalidated, causing a native stack buffer overflow

39.0.0 - 48.0.3 and 49.0.0 - 49.0.1 RUSTSEC-2026-0327

`call_ref` and exception `catch` can drop some fuel accounting, leading to exponential fuel amplification

47.0.0 - 48.0.2 and 49.0.0 RUSTSEC-2026-0315

View all vulnerabilities for these packages

Impacted packages

wasmtime

Timeline

Published

3 years ago

Fixed (6.0.2)

3 years ago

Fixed (8.0.1)

3 years ago

Fixed (7.0.1)

3 years ago

Last Modified

1 day ago