← volver
CVE-2024-30266

Wasmtime vulnerable to panic when using a dropped extenref-typed element segment

CVSS 3.3 LOWEPSS 0.3%CWE-843
wasmtime is a runtime for WebAssembly. The 19.0.0 release of Wasmtime contains a regression introduced during its development which can lead to a guest WebAssembly module causing a panic in the host runtime. A valid WebAssembly module, when executed at runtime, may cause this panic. This vulnerability has been patched in version 19.0.1.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Productos afectados
bytecodealliance · wasmtime

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →