Vulnerability RUSTSEC-2024-0439

Low Risk

2 years ago

Race condition could lead to WebAssembly control-flow integrity and type safety violations

19.0.0 - 21.0.1

Summary

Race condition could lead to WebAssembly control-flow integrity and type safety violations

Details

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-7qmx-3fpx-r45m. For more information see the GitHub-hosted security advisory.

References

Related Vulnerabilities

Other vulnerabilities affecting the same packages

Low Risk

9 days ago

Wasmtime: Preemption and traps during bulk operations enable breaking internal VM state

46.0.0 - 46.0.1 and 47.0.0 - 47.0.2 GHSA-2hw9-mc66-jc2q

Unknown

10 days ago

Mis-typed WebAssembly tag imports can lead to GC heap corruption

47.0.0 - 48.0.3 RUSTSEC-2026-0325

Medium Risk

10 days ago

Rooting for GC values live across `try_call` may be missing, causing GC heap corruption

47.0.0 - 48.0.3 RUSTSEC-2026-0326

Unknown

10 days ago

Wasmtime component async-lifted callback result count is unvalidated, causing a native stack buffer overflow

39.0.0 - 48.0.3 RUSTSEC-2026-0327

Medium Risk

18 days ago

`call_ref` and exception `catch` can drop some fuel accounting, leading to exponential fuel amplification

47.0.0 - 48.0.2 RUSTSEC-2026-0315

View all vulnerabilities for these packages

Impacted packages

wasmtime

Timeline

Published

2 years ago

Fixed (24.0.1)

2 years ago

Fixed (25.0.2)

2 years ago

Fixed (21.0.2)

2 years ago

Fixed (22.0.1)

2 years ago

Fixed (23.0.3)

2 years ago

Last Modified

1 hour ago