{"action":"Upgrade wasmtime to 1.0.2 or later.","affected":[{"fixed":"2.0.2","introduced":"2.0.0"},{"fixed":"1.0.2","introduced":"0"}],"component":"wasmtime","cve_ids":["CVE-2022-39392"],"ecosystem":"crates.io","epss":0.00663,"exploited":false,"fixed_versions":["2.0.2","1.0.2"],"ghsa_id":"GHSA-44mr-8vmm-wjhg","id":"tcs_01M5KES96GM2SSD13A5VWS96T6","modified_at":"2025-05-02T12:49:46Z","published_at":"2022-11-10T21:09:02Z","references":["https://osv.dev/vulnerability/GHSA-44mr-8vmm-wjhg","https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-44mr-8vmm-wjhg","https://nvd.nist.gov/vuln/detail/CVE-2022-39392","https://github.com/bytecodealliance/wasmtime/commit/e60c3742904ccbb3e26da201c9221c38a4981d72","https://github.com/bytecodealliance/wasmtime","https://groups.google.com/a/bytecodealliance.org/g/sec-announce/c/c1HBDDJwNPA","https://rustsec.org/advisories/RUSTSEC-2022-0076.html","https://rustsec.org/advisories/RUSTSEC-2022-0102.html"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-44mr-8vmm-wjhg","url":"https://osv.dev/vulnerability/GHSA-44mr-8vmm-wjhg"}],"summary":"Wasmtime out of bounds read/write with zero-memory-pages configuration"}