PyPI/wasmtime CVE-2021-32629: high 7.2, EPSS 0.46%
Memory access due to code generation flaw in Cranelift module
Action: Upgrade wasmtime to 0.27.0 or later.
pip install wasmtime==0.27.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.27.0 | - |
Fixed versions
| 0.27.0 |
Sources
- osv: GHSA-hpqh-2wqx-7qp5#PyPI/wasmtime
- https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-hpqh-2wqx-7qp5
- https://nvd.nist.gov/vuln/detail/CVE-2021-32629
- https://github.com/bytecodealliance/wasmtime/commit/95559c01aaa7c061088a433040f31e8291fb09d0
- https://crates.io/crates/cranelift-codegen
- https://github.com/RustSec/advisory-db/blob/main/crates/cranelift-codegen/RUSTSEC-2021-0067.md
- https://github.com/bytecodealliance/wasmtime/tree/main/cranelift
- https://github.com/pypa/advisory-database/tree/main/vulns/wasmtime/PYSEC-2021-87.yaml
- https://rustsec.org/advisories/RUSTSEC-2021-0067.html
- https://www.fastly.com/security-advisories/memory-access-due-to-code-generation-flaw-in-cranelift-module
CVE-2021-32629 · published · modified · JSON