CVE-2022-31146

3 advisories.

crates.io/wasmtime CVE-2022-31146: medium 6.4, EPSS 1.25%

Wasmtime vulnerable to Use After Free with `externref`s

Action: Upgrade wasmtime to 0.38.2 or later.

cargo update -p wasmtime --precise 0.38.2

introduced	fixed	last affected
0.37.0	0.38.2	-

0.38.2

CVE-2022-31146 · published 2022-07-20T22:47:13Z · modified 2025-05-02T12:48:59Z · JSON

Wasmtime vulnerable to Use After Free with `externref`s

Action: Upgrade cranelift-codegen to 0.85.2 or later.

cargo update -p cranelift-codegen --precise 0.85.2

introduced	fixed	last affected
0.84.0	0.85.2	-

0.85.2

CVE-2022-31146 · published 2022-07-20T22:47:13Z · modified 2025-05-02T12:48:59Z · JSON

Use After Free with `externref`s in Wasmtime

Action: Upgrade wasmtime to 0.38.2 or later.

cargo update -p wasmtime --precise 0.38.2

introduced	fixed	last affected
0.0.0-0	0.38.2	-

0.38.2

CVE-2022-31146 · published 2022-07-12T12:00:00Z · modified 2026-10-12T18:00:06.108579592Z · JSON