Wasmtime_jll vulnerabilities (Julia)
21 vulnerabilities.
-
Wasmtime_jllJulia Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destination 6.5 Medium -
Wasmtime_jllJulia Wasmtime: Leak in WASIp1 `fd_renumber` implementation 2.3 Low -
Wasmtime_jllJulia Wasmtime: WASI path_open(TRUNCATE) bypasses `FilePerms::WRITE` host restriction 7.5 High -
Wasmtime_jllJulia Wasmtime: Panic when allocating a table exceeding the size of the host's address space 5.9 Medium -
Wasmtime_jllJulia Wasmtime has an out-of-bounds write or crash when transcoding component model strings 6.1 Medium -
Wasmtime_jllJulia Wasmtime has an improperly masked return value from `table.grow` with Winch compiler backend 6.1 Medium -
Wasmtime_jllJulia Wasmtime leaks data between pooling allocator instances 2.3 Low -
Wasmtime_jllJulia Wasmtime with Winch compiler backend on aarch64 may allow a sandbox-escaping memory access 9.0 Critical -
Wasmtime_jllJulia Wasmtime miscompiled guest heap access enables sandbox escape on aarch64 Cranelift 9.0 Critical -
Wasmtime_jllJulia Wasmtime's host panics when Winch compiler executes `table.fill` 5.9 Medium -
Wasmtime_jllJulia Wasmtime leaks host data with 64-bit tables and Winch 2.3 Low -
Wasmtime_jllJulia Wasmtime segfault or unused out-of-sandbox load with `f64x2.splat` operator on x86-64 4.1 Medium -
Wasmtime_jllJulia Wasmtime panics when lifting `flags` component value 5.6 Medium -
Wasmtime_jllJulia Wasmtime panics when transcoding misaligned utf-16 strings 5.9 Medium -
Wasmtime_jllJulia Wasmtime has a Heap OOB read in component model UTF-16 to latin1+utf16 string transcoding 6.9 Medium -
Wasmtime_jllJulia Wasmtime can panic when adding excessive fields to a `wasi:http/types.fields` instance 6.9 Medium -
Wasmtime_jllJulia Wasmtime WASI implementations are vulnerable to guest-controlled resource exhaustion 6.9 Medium -
Wasmtime_jllJulia Wasmtime is vulnerable to panic when dropping a `[Typed]Func::call_async` future 6.9 Medium -
Wasmtime_jllJulia Wasmtime provides unsound API access to a WebAssembly shared linear memory 1.8 Low -
Wasmtime_jllJulia Wasmtime has host panic with `fd_renumber` WASIp1 function 3.5 Low -
Wasmtime_jllJulia Wasmtime doesn't fully sandbox all the Windows device filenames 2.3 Low