Skip to content
OpenAdvisories

Package · crates.io

cranelift-codegen

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2023-26489

    Guest-controlled out-of-bounds read/write on x86_64 in wasmtime

    wasmtime is a fast and secure runtime for WebAssembly. In affected versions wasmtime's code generator, Cranelift, has a bug on x86_64 targets where address-mode computation mistakenly would calculate a 35-bit effective address instead of WebAssembly's defined…

    bytecodealliance wasmtime wasmtime zellij Wolfi crates.io