CVE-2024-47813

3 advisories.

crates.io/wasmtime CVE-2024-47813: low 2.9, EPSS 0.15%

Wasmtime race condition could lead to WebAssembly control-flow integrity and type safety violations

Action: Upgrade wasmtime to 21.0.2 or later.

cargo update -p wasmtime --precise 21.0.2

cargo update -p wasmtime --precise 22.0.1

cargo update -p wasmtime --precise 23.0.3

cargo update -p wasmtime --precise 24.0.1

cargo update -p wasmtime --precise 25.0.2

Affected

introduced	fixed	last affected
19.0.0	21.0.2	-
22.0.0	22.0.1	-
23.0.0	23.0.3	-
24.0.0	24.0.1	-
25.0.0	25.0.2	-

Fixed versions

21.0.2

22.0.1

23.0.3

24.0.1

25.0.2

Sources

CVE-2024-47813 · published 2024-10-09T19:14:35Z · modified 2026-09-10T03:50:19.531444057Z · JSON

crates.io/wasmtime CVE-2024-47813: low 2.9, EPSS 0.15%

Race condition could lead to WebAssembly control-flow integrity and type safety violations

Action: Upgrade wasmtime to 21.0.2 or later.

cargo update -p wasmtime --precise 21.0.2

cargo update -p wasmtime --precise 22.0.1

cargo update -p wasmtime --precise 23.0.3

cargo update -p wasmtime --precise 24.0.1

cargo update -p wasmtime --precise 25.0.2

Affected

introduced	fixed	last affected
19.0.0	21.0.2	-
22.0.0	22.0.1	-
23.0.0	23.0.3	-
24.0.0	24.0.1	-
25.0.0	25.0.2	-

Fixed versions

21.0.2

22.0.1

23.0.3

24.0.1

25.0.2

Sources

CVE-2024-47813 · published 2024-10-03T12:00:00Z · modified 2026-10-12T18:00:07.405869415Z · JSON

PyPI/wasmtime CVE-2024-47813: low 2.9, EPSS 0.15%

Wasmtime is an open source runtime for WebAssembly. Under certain concurrent event orderings, a `wasmtime::Engine`'s internal type registry was susceptible to double-unregistration bugs due to a race

Action: No fix published. Pin and monitor.

Affected

introduced	fixed	last affected
0	-	19.0.0

Fixed versions

No fixed version in the source.

Sources

CVE-2024-47813 · published 2024-10-09T18:15:09.120Z · modified 2026-05-21T15:00:24.329727937Z · JSON