Executive brief
Memory access due to code generation flaw in Cranelift module
Affected products
- crates.io cranelift-codegen
- PyPI wasmtime
Junglewise Threat Intelligence
CVE-2021-32629: RUSTSEC-2021-0067 - Memory access due to code generation flaw in Cranelift module
CVE-2021-32629 · Severity: low · CVSS 3.1 · Published 2021-05-21
Technologies: cranelift-codegen (crates.io), wasmtime (PyPI). Vendors: crates.io, PyPI.
Related threats
- Bytecode Alliance Wasmtime use-after-free in Linker cloning
- Bytecode Alliance Wasmtime race condition in internal type registry
- RUSTSEC-2024-0441 - Panic when using a dropped extenref-typed element segment
- RUSTSEC-2022-0100 - Use After Free with `externref`s in Wasmtime
- RUSTSEC-2022-0101 - Miscompilation of constant values in division on AArch64