crates.io cranelift-codegen vulnerabilities

Latest crates.io cranelift-codegen CVEs

Newest publication first

1. CVE-2023-26489 Guest-controlled out-of-bounds read/write on x86_64 in wasmtime

   Published 2023-03-08

   Critical·CVSS 9.9 EPSS 1.3%

   wasmtime is a fast and secure runtime for WebAssembly. In affected versions wasmtime's code generator, Cranelift, has a bug on x86_64 targets where address-mode computation mistakenly would calculate a 35-bit effective address instead of WebAssembly's defined 33-bit effective add...

2. CVE-2023-27477 wasmtime vulnerable to miscompilation of `i8x16.select` with the same inputs on x86_64

   Published 2023-03-08

   Medium·CVSS 4.3 EPSS 0.62%

   wasmtime is a fast and secure runtime for WebAssembly. Wasmtime's code generation backend, Cranelift, has a bug on x86_64 platforms for the WebAssembly i8x16.select instruction which will produce the wrong results when the same operand is provided to the instruction and some of t...

3. CVE-2022-31146 Use After Free in Wasmtime

   Published 2022-07-20

   High·CVSS 8.8 EPSS 1.3%

   Wasmtime is a standalone runtime for WebAssembly. There is a bug in the Wasmtime's code generator, Cranelift, where functions using reference types may be incorrectly missing metadata required for runtime garbage collection. This means that if a GC happens at runtime then the GC...

4. CVE-2022-31104 Miscompilation of `i8x16.swizzle` and `select` with v128 inputs in Wasmtime

   Published 2022-06-27

   Medium·CVSS 5.6 EPSS 1.8%

   Wasmtime is a standalone runtime for WebAssembly. In affected versions wasmtime's implementation of the SIMD proposal for WebAssembly on x86_64 contained two distinct bugs in the instruction lowerings implemented in Cranelift. The aarch64 implementation of the simd proposal is no...

5. CVE-2022-23636 Invalid drop of partially-initialized instances in wasmtime

   Published 2022-02-16

   High·CVSS 7.5 EPSS 0.77%

   Wasmtime is an open source runtime for WebAssembly & WASI. Prior to versions 0.34.1 and 0.33.1, there exists a bug in the pooling instance allocator in Wasmtime's runtime where a failure to instantiate an instance for a module that defines an externref global will result in an in...

6. CVE-2021-32629 Memory access due to code generation flaw in Cranelift module

   Published 2021-05-24

   High·CVSS 8.8 EPSS 0.46%

   Cranelift is an open-source code generator maintained by Bytecode Alliance. It translates a target-independent intermediate representation into executable machine code. There is a bug in 0.73 of the Cranelift x64 backend that can create a scenario that could result in a potential...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.