CVE-2024-30266

Fixed in a distro release EPSS <1%CVSS 3.3

wasmtime is a runtime for WebAssembly. The 19.0.0 release of Wasmtime contains a regression introduced during its development which can lead to a guest WebAssembly module causing a panic in the host runtime. A valid WebAssembly module, when executed at runtime, may cause this panic. This vulnerability has been patched in version 19.0.1.

Published 2024-04-04 · CVE record · OSV

Products: bytecodealliance wasmtime

Fixed upstream

Distro releases