Executive brief
Miscompilation of `i8x16.swizzle` and `select` with v128 inputs
Affected products
- crates.io cranelift-codegen
- crates.io wasmtime
Junglewise Threat Intelligence
CVE-2022-31104: RUSTSEC-2022-0095 - Miscompilation of `i8x16.swizzle` and `select` with v128 inputs
CVE-2022-31104 · Severity: low · CVSS 3.1 · Published 2022-06-27
Technologies: cranelift-codegen (crates.io), wasmtime (crates.io). Vendors: crates.io.
Related threats
- RUSTSEC-2026-0269 - Filesystem sandbox escape when paths or symlinks contain trailing slashes
- RUSTSEC-2026-0268 - Guest controlled-size host heap allocation through WASIp3 streams
- RUSTSEC-2026-0222 - Stores can mix up type indices between engines
- RUSTSEC-2026-0223 - Preemption and traps during bulk operations enable breaking internal VM state
- Bytecode Alliance Wasmtime denial of service via table allocation panic