VDB
CVE-2022-24791
CVE-2022-24791
PUBLISHED
CVSS 8.100000381469727 HIGH
Use after free in Wasmtime
EPSS 1.18% · 67.6th percentile
Risk Scores
CVSS 3.1
8.100000381469727
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
1.18%
67.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| crates.io | wasmtime | 0, 0.35.0 |
| bytecodealliance | wasmtime | < 0.34.2, >= 0.35.0, < 0.35.2, 0.35.0 |
Timeline
- Mar 28, 2022 CVE Published
- Apr 1, 2022 EPSS Score
- May 22, 2022 EPSS Score
- Jul 13, 2022 EPSS Score
- Sep 3, 2022 EPSS Score
- Oct 25, 2022 EPSS Score
- Dec 15, 2022 EPSS Score
- Feb 5, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- May 19, 2023 EPSS Score
- Jul 9, 2023 EPSS Score
- Aug 30, 2023 EPSS Score
References
- https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-gwc9-348x-qwv2 url
- https://github.com/bytecodealliance/wasmtime/commit/666c2554ea0e1728c35aa41178cf235920db888a url
- https://nvd.nist.gov/vuln/detail/CVE-2022-24791 advisory
- https://docs.rs/wasmtime/latest/wasmtime/struct.Config.html#method.epoch_interruption url
- https://github.com/WebAssembly/reference-types url
- https://github.com/bytecodealliance/wasmtime package
- https://rustsec.org/advisories/RUSTSEC-2022-0016.html url
- https://rustsec.org/advisories/RUSTSEC-2022-0099.html url