CVE-2024-30266

3 advisories.

crates.io/wasmtime CVE-2024-30266: low 3.3, EPSS 0.32%

Wasmtime vulnerable to panic when using a dropped extenref-typed element segment

Action: Upgrade wasmtime to 19.0.1 or later.

cargo update -p wasmtime --precise 19.0.1

Affected

introduced	fixed	last affected
19.0.0	19.0.1	-

Fixed versions

19.0.1

Sources

CVE-2024-30266 · published 2024-04-02T21:09:23Z · modified 2026-09-10T03:50:12.373857562Z · JSON

crates.io/wasmtime CVE-2024-30266: low 3.3, EPSS 0.32%

Panic when using a dropped extenref-typed element segment

Action: Upgrade wasmtime to 19.0.1 or later.

cargo update -p wasmtime --precise 19.0.1

Affected

introduced	fixed	last affected
19.0.0	19.0.1	-

Fixed versions

19.0.1

Sources

CVE-2024-30266 · published 2024-04-02T12:00:00Z · modified 2026-10-12T18:00:07.449700455Z · JSON

PyPI/wasmtime CVE-2024-30266: medium 5.5, EPSS 0.32%

wasmtime is a runtime for WebAssembly. The 19.0.0 release of Wasmtime contains a regression introduced during its development which can lead to a guest WebAssembly module causing a panic in the host r

Action: No fix published. Pin and monitor.

Affected

introduced	fixed	last affected
0	-	19.0.0

Fixed versions

No fixed version in the source.

Sources

CVE-2024-30266 · published 2024-04-04T16:15:09.107Z · modified 2026-07-13T07:26:38.201559381Z · JSON