{"action":"Upgrade cranelift-codegen to 0.85.1 or later.","affected":[{"fixed":"0.85.1","introduced":"0"}],"component":"cranelift-codegen","cve_ids":["CVE-2022-31104"],"ecosystem":"crates.io","epss":0.01785,"exploited":false,"fixed_versions":["0.85.1"],"ghsa_id":"GHSA-jqwc-c49r-4w2x","id":"tcs_01M5KF17V7D69BYWHQ7PR0FV6J","modified_at":"2025-05-02T12:49:13Z","published_at":"2022-06-29T22:08:25Z","references":["https://osv.dev/vulnerability/GHSA-jqwc-c49r-4w2x","https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-jqwc-c49r-4w2x","https://nvd.nist.gov/vuln/detail/CVE-2022-31104","https://github.com/bytecodealliance/wasmtime/pull/4317","https://github.com/bytecodealliance/wasmtime/pull/4318","https://docs.rs/wasmtime/latest/wasmtime/struct.Config.html#method.wasm_simd","https://github.com/bytecodealliance/wasmtime","https://github.com/webassembly/simd","https://rustsec.org/advisories/RUSTSEC-2022-0095.html","https://webassembly.github.io/spec"],"severity":{"label":"medium","score":4.8},"sources":[{"source":"osv","source_id":"GHSA-jqwc-c49r-4w2x#crates.io/cranelift-codegen","url":"https://osv.dev/vulnerability/GHSA-jqwc-c49r-4w2x"}],"summary":"Miscompilation of `i8x16.swizzle` and `select` with v128 inputs"}