CVE-2022-39393

3 advisories.

crates.io/wasmtime CVE-2022-39393: high 8.6

Wasmtime may have data leakage between instances in the pooling allocator

Action: Upgrade wasmtime to 1.0.2 or later.

cargo update -p wasmtime --precise 2.0.2

cargo update -p wasmtime --precise 1.0.2

introduced	fixed	last affected
2.0.0	2.0.2	-
0	1.0.2	-

2.0.2

1.0.2

CVE-2022-39393 · published 2022-11-10T21:16:22Z · modified 2025-05-02T12:51:03Z · JSON

Bug in pooling instance allocator

Action: Upgrade wasmtime to 1.0.2 or later.

cargo update -p wasmtime --precise 1.0.2

cargo update -p wasmtime --precise 2.0.2

introduced	fixed	last affected
0.0.0-0	1.0.2	-
2.0.0	2.0.2	-

1.0.2

2.0.2

CVE-2022-39393 · published 2022-11-10T12:00:00Z · modified 2026-10-12T18:00:05.117534654Z · JSON

Data leakage between instances in the pooling allocator

Action: Upgrade wasmtime to 1.0.2 or later.

cargo update -p wasmtime --precise 1.0.2

cargo update -p wasmtime --precise 2.0.2

introduced	fixed	last affected
0.0.0-0	1.0.2	-
2.0.0	2.0.2	-

1.0.2

2.0.2

CVE-2022-39393 · published 2022-11-05T12:00:00Z · modified 2026-10-12T18:00:04.405460526Z · JSON