CVE-2022-31169

5 advisories.

crates.io/wasmtime CVE-2022-23636, CVE-2022-31169: medium 5.9, EPSS 0.77%

Cranelift vulnerable to miscompilation of constant values in division on AArch64

Action: Upgrade wasmtime to 0.38.2 or later.

cargo update -p wasmtime --precise 0.38.2

introduced	fixed	last affected
0	0.38.2	-

0.38.2

CVE-2022-23636, CVE-2022-31169 · published 2022-07-21T22:34:38Z · modified 2025-05-02T12:49:25Z · JSON

Cranelift vulnerable to miscompilation of constant values in division on AArch64

Action: Upgrade cranelift-codegen to 0.85.2 or later.

cargo update -p cranelift-codegen --precise 0.85.2

introduced	fixed	last affected
0	0.85.2	-

0.85.2

CVE-2022-23636, CVE-2022-31169 · published 2022-07-21T22:34:38Z · modified 2025-05-02T12:49:25Z · JSON

Invalid drop of partially-initialized instances in the pooling instance allocator for modules with defined `externref` globals

Action: Upgrade wasmtime to 0.33.1 or later.

cargo update -p wasmtime --precise 0.34.1

cargo update -p wasmtime --precise 0.33.1

introduced	fixed	last affected
0.34.0	0.34.1	-
0	0.33.1	-

0.34.1

0.33.1

CVE-2022-23636, CVE-2022-31169 · published 2022-02-16T22:35:03Z · modified 2025-05-02T12:48:30Z · JSON

Invalid drop of VMExternRef from partially-initialized instances in the pooling instance allocator

Action: Upgrade wasmtime to 0.33.1 or later.

cargo update -p wasmtime --precise 0.33.1

cargo update -p wasmtime --precise 0.34.1

introduced	fixed	last affected
0.0.0-0	0.33.1	-
0.34.0	0.34.1	-

0.33.1

0.34.1

CVE-2022-23636, CVE-2022-31169 · published 2022-02-17T12:00:00Z · modified 2026-10-12T18:00:03.401494554Z · JSON

Miscompilation of constant values in division on AArch64

Action: Upgrade wasmtime to 0.38.2 or later.

cargo update -p wasmtime --precise 0.38.2

introduced	fixed	last affected
0.0.0-0	0.38.2	-

0.38.2

CVE-2022-23636, CVE-2022-31169 · published 2022-07-05T12:00:00Z · modified 2026-10-12T18:00:04.415945006Z · JSON