PkgSeer

Vulnerability RUSTSEC-2025-0118

Low Risk

11 months ago

Unsound API access to a WebAssembly shared linear memory

0.0.0 - 24.0.4

Summary

Unsound API access to a WebAssembly shared linear memory

Details

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-hc7m-r6v8-hg9q For more information see the GitHub-hosted security advisory.

References

Related Vulnerabilities

Other vulnerabilities affecting the same packages

Wasmtime: Preemption and traps during bulk operations enable breaking internal VM state

46.0.0 - 46.0.1 and 47.0.0 - 47.0.2 GHSA-2hw9-mc66-jc2q

Mis-typed WebAssembly tag imports can lead to GC heap corruption

47.0.0 - 48.0.3 RUSTSEC-2026-0325

Rooting for GC values live across `try_call` may be missing, causing GC heap corruption

47.0.0 - 48.0.3 RUSTSEC-2026-0326

Wasmtime component async-lifted callback result count is unvalidated, causing a native stack buffer overflow

39.0.0 - 48.0.3 RUSTSEC-2026-0327

`call_ref` and exception `catch` can drop some fuel accounting, leading to exponential fuel amplification

47.0.0 - 48.0.2 RUSTSEC-2026-0315

View all vulnerabilities for these packages

Impacted packages

wasmtime

Timeline

Published

11 months ago

Fixed (24.0.5)

11 months ago

Fixed (36.0.3)

11 months ago

Fixed (37.0.3)

11 months ago

Fixed (38.0.4)

11 months ago

Last Modified

1 hour ago