OSV-2022-781

    Dashboard / Vulnerabilities / OSV-2022-781

    OSV-2022-781

    Published: 26 Aug 2022Last Modified: 26 Aug 2022

    Summary: Segv on unknown address in wasmtime_runtime::traphandlers::catch_traps::call_closure::hec711b3339636b04

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50596 ``` Crash type: Segv on unknown address Crash state: wasmtime_runtime::traphandlers::catch_traps::call_closure::hec711b3339636b04 wasmtime_setjmp wasmtime::linker::Linker$LT$T$GT$::instantiate::h7e42baf4a320e0da ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50596

    Affected packages

    Package

    Name: wasmtime

    Purl: pkg:generic/wasmtime

    Affected ranges

    Type: GIT

    Events:

    Introduced- cee4b209f346ea279490268fe434dc52d0e0680c
    Fixed -dde2c5a3b6ee6caa1d597da0885613d2ce6a406a

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2022-781 | CVE-DB