CVE-2021-32629
4 advisories.
crates.io/cranelift-codegen CVE-2021-32629: high 7.2, EPSS 0.46%
Memory access due to code generation flaw in Cranelift module
Action: Upgrade cranelift-codegen to 0.73.1 or later.
cargo update -p cranelift-codegen --precise 0.73.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.73.1 | - |
Fixed versions
| 0.73.1 |
Sources
- osv: GHSA-hpqh-2wqx-7qp5
- https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-hpqh-2wqx-7qp5
- https://nvd.nist.gov/vuln/detail/CVE-2021-32629
- https://github.com/bytecodealliance/wasmtime/commit/95559c01aaa7c061088a433040f31e8291fb09d0
- https://crates.io/crates/cranelift-codegen
- https://github.com/RustSec/advisory-db/blob/main/crates/cranelift-codegen/RUSTSEC-2021-0067.md
- https://github.com/bytecodealliance/wasmtime/tree/main/cranelift
- https://github.com/pypa/advisory-database/tree/main/vulns/wasmtime/PYSEC-2021-87.yaml
- https://rustsec.org/advisories/RUSTSEC-2021-0067.html
- https://www.fastly.com/security-advisories/memory-access-due-to-code-generation-flaw-in-cranelift-module
CVE-2021-32629 · published · modified · JSON
PyPI/wasmtime CVE-2021-32629: high 7.2, EPSS 0.46%
Memory access due to code generation flaw in Cranelift module
Action: Upgrade wasmtime to 0.27.0 or later.
pip install wasmtime==0.27.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.27.0 | - |
Fixed versions
| 0.27.0 |
Sources
- osv: GHSA-hpqh-2wqx-7qp5#PyPI/wasmtime
- https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-hpqh-2wqx-7qp5
- https://nvd.nist.gov/vuln/detail/CVE-2021-32629
- https://github.com/bytecodealliance/wasmtime/commit/95559c01aaa7c061088a433040f31e8291fb09d0
- https://crates.io/crates/cranelift-codegen
- https://github.com/RustSec/advisory-db/blob/main/crates/cranelift-codegen/RUSTSEC-2021-0067.md
- https://github.com/bytecodealliance/wasmtime/tree/main/cranelift
- https://github.com/pypa/advisory-database/tree/main/vulns/wasmtime/PYSEC-2021-87.yaml
- https://rustsec.org/advisories/RUSTSEC-2021-0067.html
- https://www.fastly.com/security-advisories/memory-access-due-to-code-generation-flaw-in-cranelift-module
CVE-2021-32629 · published · modified · JSON
crates.io/cranelift-codegen CVE-2021-32629: high 8.8, EPSS 0.46%
Memory access due to code generation flaw in Cranelift module
Action: Upgrade cranelift-codegen to 0.73.1 or later.
cargo update -p cranelift-codegen --precise 0.73.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.0-0 | 0.73.1 | - |
Fixed versions
| 0.73.1 |
Sources
- osv: RUSTSEC-2021-0067
- https://crates.io/crates/cranelift-codegen
- https://rustsec.org/advisories/RUSTSEC-2021-0067.html
- https://github.com/bytecodealliance/wasmtime/commit/95559c01aaa7c061088a433040f31e8291fb09d0
CVE-2021-32629 · published · modified · JSON
PyPI/wasmtime CVE-2021-32629: unknown, EPSS 0.46%
Cranelift is an open-source code generator maintained by Bytecode Alliance. It translates a target-independent intermediate representation into executable machine code. There is a bug in 0.73 of the C
Action: Upgrade wasmtime to 0.27.0 or later.
pip install wasmtime==0.27.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.27.0 | - |
Fixed versions
| 0.27.0 |
Sources
- osv: PYSEC-2021-87
- https://github.com/bytecodealliance/wasmtime/commit/95559c01aaa7c061088a433040f31e8291fb09d0
- https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-hpqh-2wqx-7qp5
- https://www.fastly.com/security-advisories/memory-access-due-to-code-generation-flaw-in-cranelift-module
- https://crates.io/crates/cranelift-codegen
CVE-2021-32629 · published · modified · JSON