Security Advisories for wasmtime in cargo
Moderate
3 months ago
wasmtime has a panic when allocating a table exceeding the size of the host's address space
cargo
wasmtime
Moderate
4 months ago
Wasmtime has improperly masked return value from `table.grow` with Winch compiler backend
cargo
wasmtime
Critical
4 months ago
Wasmtime with Winch compiler backend on aarch64 may allow a sandbox-escaping memory access
cargo
wasmtime
Moderate
4 months ago
Wasmtime has out-of-bounds write or crash when transcoding component model strings
cargo
wasmtime
Critical
4 months ago
Wasmtime: Miscompiled guest heap access enables sandbox escape on aarch64 Cranelift
cargo
wasmtime
Moderate
4 months ago
Wasmtime has host panic when Winch compiler executes `table.fill`
cargo
wasmtime
Moderate
4 months ago
Wasmtime segfault or unused out-of-sandbox load with `f64x2.splat` operator on x86-64
cargo
wasmtime
Moderate
4 months ago
Wasmtime has a possible panic when lifting `flags` component value
cargo
wasmtime
Moderate
4 months ago
Wasmtime: Heap OOB read in component model UTF-16 to latin1+utf16 string transcoding
cargo
wasmtime
Moderate
6 months ago
Wasmtime can panic when adding excessive fields to a `wasi:http/types.fields` instance
cargo
wasmtime
Moderate
6 months ago
Wasmtime WASI implementations are vulnerable to guest-controlled resource exhaustion
cargo
wasmtime
Moderate
6 months ago
Wasmtime is vulnerable to panic when dropping a `[Typed]Func::call_async` future
cargo
wasmtime
Moderate
6 months ago
Wasmtime segfault or unused out-of-sandbox load with f64.copysign operator on x86-64
cargo
wasmtime
Low
9 months ago
Wasmtime provides unsound API access to a WebAssembly shared linear memory
cargo
wasmtime
Low
about 1 year ago
Wasmtime CLI is vulnerable to host panic through its fd_renumber function
cargo
wasmtime, wasmtime-wasi
Potential
Moderate
about 1 year ago
wasmtime_jit_debug Dumps Undefined Memory by `JitDumpFile`
cargo
wasmtime-jit-debug
Low
almost 2 years ago
Wasmtime doesn't fully sandbox all the Windows device filenames
cargo
wasmtime
Low
almost 2 years ago
Wasmtime race condition could lead to WebAssembly control-flow integrity and type safety violations
cargo
wasmtime
Moderate
almost 2 years ago
wasmtime has a runtime crash when combining tail calls with trapping imports
cargo
wasmtime
Low
over 2 years ago
Wasmtime vulnerable to panic when using a dropped extenref-typed element segment
cargo
wasmtime
Low
over 2 years ago
wasmtime_trap_code C API function has out of bounds write vulnerability
cargo
wasmtime
Low
almost 3 years ago
Miscompilation of wasm `i64x2.shr_s` instruction with constant input on x86_64
cargo
wasmtime
Critical
over 3 years ago
wasmtime vulnerable to guest-controlled out-of-bounds read/write on x86_64
cargo
cranelift-codegen, wasmtime
Low
over 3 years ago
wasmtime vulnerable to miscompilation of `i8x16.select` with the same inputs on x86_64
cargo
cranelift-codegen, wasmtime
High
over 3 years ago
Wasmtime may have data leakage between instances in the pooling allocator
cargo
wasmtime
Moderate
over 3 years ago
Wasmtime out of bounds read/write with zero-memory-pages configuration
cargo
wasmtime
Moderate
about 4 years ago
Cranelift vulnerable to miscompilation of constant values in division on AArch64
cargo
cranelift-codegen, wasmtime
Moderate
about 4 years ago
Wasmtime vulnerable to Use After Free with `externref`s
cargo
cranelift-codegen, wasmtime
Moderate
about 4 years ago
Miscompilation of `i8x16.swizzle` and `select` with v128 inputs
cargo
cranelift-codegen, wasmtime
Moderate
over 4 years ago
Invalid drop of partially-initialized instances in the pooling instance allocator for modules with defined `externref` globals
cargo
wasmtime
Moderate
almost 5 years ago
Wrong type for `Linker`-define functions when used across two `Engine`s
pypi, cargo
wasmtime
Moderate
almost 5 years ago
Out-of-bounds read/write and invalid free with `externref`s and GC safepoints in Wasmtime
pypi, cargo
wasmtime
Moderate
almost 5 years ago
Use after free passing `externref`s to Wasm in Wasmtime
pypi, cargo
wasmtime
Potential
High
almost 5 years ago
Memory access due to code generation flaw in Cranelift module
cargo
cranelift-codegen