Skip to content
OpenAdvisories

Vendor

bytecodealliance

92 known vulnerabilities.

Products

wasmtime 81 wasm-micro-runtime 8 rustix 1 lucet 1 cap-std 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.1
    CVE-2022-23636 Public exploit

    Invalid drop of partially-initialized instances in wasmtime

    Wasmtime is an open source runtime for WebAssembly & WASI. Prior to versions 0.34.1 and 0.33.1, there exists a bug in the pooling instance allocator in Wasmtime's runtime where a failure to instantiate an instance for a module that defines an `externref` glob…

    bytecodealliance wasmtime wasmtime cranelift-codegen crates.io