Description

wasmtime is a runtime for WebAssembly. The 19.0.0 release of Wasmtime contains a regression introduced during its development which can lead to a guest WebAssembly module causing a panic in the host runtime. A valid WebAssembly module, when executed at runtime, may cause this panic. This vulnerability has been patched in version 19.0.1.

INFO

Published Date :

2024-04-04T15:42:00.200Z

Last Modified :

2024-08-02T01:32:07.072Z

Source :

GitHub_M
AFFECTED PRODUCTS

The following products are affected by CVE-2024-30266 vulnerability.

Vendors Products
Bytecodealliance
  • Wasmtime
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-30266.

URL Resource
https://github.com/bytecodealliance/wasmtime/commit/7f57d0bb0948fa56cc950278d0db230ed10e8664 cve-icon cve-icon cve-icon
https://github.com/bytecodealliance/wasmtime/issues/8281 cve-icon cve-icon cve-icon
https://github.com/bytecodealliance/wasmtime/pull/8018 cve-icon cve-icon cve-icon
https://github.com/bytecodealliance/wasmtime/pull/8283 cve-icon cve-icon cve-icon
https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-75hq-h6g9-h4q5 cve-icon cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact