CVE-2022-39392

3 advisories.

crates.io/wasmtime CVE-2022-39392: medium 5.9

Wasmtime out of bounds read/write with zero-memory-pages configuration

Action: Upgrade wasmtime to 1.0.2 or later.

cargo update -p wasmtime --precise 2.0.2

cargo update -p wasmtime --precise 1.0.2

introduced	fixed	last affected
2.0.0	2.0.2	-
0	1.0.2	-

2.0.2

1.0.2

CVE-2022-39392 · published 2022-11-10T21:09:02Z · modified 2025-05-02T12:49:46Z · JSON

Bug in Wasmtime implementation of pooling instance allocator

Action: Upgrade wasmtime to 1.0.2 or later.

cargo update -p wasmtime --precise 1.0.2

cargo update -p wasmtime --precise 2.0.2

introduced	fixed	last affected
0.0.0-0	1.0.2	-
2.0.0	2.0.2	-

1.0.2

2.0.2

CVE-2022-39392 · published 2022-11-10T12:00:00Z · modified 2026-10-12T18:00:04.415316210Z · JSON

Out of bounds read/write with zero-memory-pages configuration

Action: Upgrade wasmtime to 1.0.2 or later.

cargo update -p wasmtime --precise 1.0.2

cargo update -p wasmtime --precise 2.0.2

introduced	fixed	last affected
0.0.0-0	1.0.2	-
2.0.0	2.0.2	-

1.0.2

2.0.2

CVE-2022-39392 · published 2022-11-05T12:00:00Z · modified 2026-10-12T18:00:05.114347770Z · JSON