{"action":"Upgrade wasmtime to 1.0.2 or later.","affected":[{"fixed":"2.0.2","introduced":"2.0.0"},{"fixed":"1.0.2","introduced":"0"}],"component":"wasmtime","cve_ids":["CVE-2022-39394"],"ecosystem":"crates.io","epss":0.00354,"exploited":false,"fixed_versions":["2.0.2","1.0.2"],"ghsa_id":"GHSA-h84q-m8rr-3v9q","id":"tcs_01M5KF0DN1SF9P8WAM3TM35M2Q","modified_at":"2025-05-02T12:51:45Z","published_at":"2024-02-01T00:15:47Z","references":["https://osv.dev/vulnerability/GHSA-h84q-m8rr-3v9q","https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-h84q-m8rr-3v9q","https://nvd.nist.gov/vuln/detail/CVE-2022-39394","https://github.com/bytecodealliance/wasmtime/commit/087d9d7becf7422b3f872a3bcd5d97bb7ce7ff36","https://github.com/bytecodealliance/wasmtime/commit/5b6d5e78de106503b3b9add218bb3d2b1d63c493","https://github.com/bytecodealliance/wasmtime","https://groups.google.com/a/bytecodealliance.org/g/sec-announce/c/c1HBDDJwNPA","https://rustsec.org/advisories/RUSTSEC-2022-0097.html"],"severity":{"label":"low","score":3.8},"sources":[{"source":"osv","source_id":"GHSA-h84q-m8rr-3v9q","url":"https://osv.dev/vulnerability/GHSA-h84q-m8rr-3v9q"}],"summary":"wasmtime_trap_code C API function has out of bounds write vulnerability"}