Executive brief
Panic when using a dropped extenref-typed element segment
Affected products
- crates.io wasmtime
- PyPI wasmtime
Junglewise Threat Intelligence
CVE-2024-30266: RUSTSEC-2024-0441 - Panic when using a dropped extenref-typed element segment
CVE-2024-30266 · Severity: low · CVSS 3.1 · Published 2024-04-02
Technologies: wasmtime (crates.io), wasmtime (PyPI). Vendors: crates.io, PyPI.
Related threats
- RUSTSEC-2026-0269 - Filesystem sandbox escape when paths or symlinks contain trailing slashes
- RUSTSEC-2026-0268 - Guest controlled-size host heap allocation through WASIp3 streams
- RUSTSEC-2026-0222 - Stores can mix up type indices between engines
- RUSTSEC-2026-0223 - Preemption and traps during bulk operations enable breaking internal VM state
- Bytecode Alliance Wasmtime denial of service via table allocation panic