Cranelift Codegen

6 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-27477 Cargo MEDIUM PATCH This Month

wasmtime is a fast and secure runtime for WebAssembly. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Cranelift Codegen Wasmtime

NVD GitHub

CVSS 3.1

4.3

EPSS

0.6%

CVE-2023-26489 Cargo CRITICAL PATCH Act Now

wasmtime is a fast and secure runtime for WebAssembly. Rated critical severity (CVSS 9.9), this vulnerability is remotely exploitable, low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.

Buffer Overflow Information Disclosure Cranelift Codegen Wasmtime

NVD GitHub

CVSS 3.1

9.9

EPSS

1.3%

CVE-2022-31169 Cargo HIGH PATCH This Week

Wasmtime is a standalone runtime for WebAssembly. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Cranelift Codegen Wasmtime

NVD GitHub

CVSS 3.1

7.5

EPSS

0.7%

CVE-2022-31146 Cargo HIGH PATCH This Week

Wasmtime is a standalone runtime for WebAssembly. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Memory Corruption Information Disclosure Use After Free Cranelift Codegen Wasmtime

NVD GitHub

CVSS 3.1

8.8

EPSS

0.9%

CVE-2022-31104 Cargo MEDIUM PATCH This Month

Wasmtime is a standalone runtime for WebAssembly. Rated medium severity (CVSS 5.6), this vulnerability is remotely exploitable, no authentication required.

Information Disclosure Cranelift Codegen Wasmtime

NVD GitHub

CVSS 3.1

5.6

EPSS

1.6%

CVE-2021-32629 LIB HIGH POC PATCH This Week

Cranelift is an open-source code generator maintained by Bytecode Alliance. Rated high severity (CVSS 8.8), this vulnerability is low attack complexity. Public exploit code available.

Information Disclosure Cranelift Codegen

NVD GitHub

CVSS 3.1

8.8

EPSS

0.5%

CVE-2023-27477 Cargo

EPSS 1% CVSS 4.3

MEDIUM PATCH This Month

wasmtime is a fast and secure runtime for WebAssembly. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Cranelift Codegen Wasmtime

NVD GitHub

CVE-2023-26489 Cargo

EPSS 1% CVSS 9.9

CRITICAL PATCH Act Now

Buffer Overflow Information Disclosure Cranelift Codegen +1

NVD GitHub

CVE-2022-31169 Cargo

EPSS 1% CVSS 7.5

HIGH PATCH This Week

Wasmtime is a standalone runtime for WebAssembly. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Cranelift Codegen Wasmtime

NVD GitHub

CVE-2022-31146 Cargo

EPSS 1% CVSS 8.8

HIGH PATCH This Week

Wasmtime is a standalone runtime for WebAssembly. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Memory Corruption Information Disclosure Use After Free +2

NVD GitHub

CVE-2022-31104 Cargo

EPSS 2% CVSS 5.6

MEDIUM PATCH This Month

Wasmtime is a standalone runtime for WebAssembly. Rated medium severity (CVSS 5.6), this vulnerability is remotely exploitable, no authentication required.

Information Disclosure Cranelift Codegen Wasmtime

NVD GitHub

CVE-2021-32629 LIB

EPSS 0% CVSS 8.8

HIGH POC PATCH This Week

Cranelift is an open-source code generator maintained by Bytecode Alliance. Rated high severity (CVSS 8.8), this vulnerability is low attack complexity. Public exploit code available.

Information Disclosure Cranelift Codegen

NVD GitHub