OSV-2022-597

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/wasmtime/OSV-2022-597.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2022-597
Published
2022-07-19T00:01:55.792573Z
Modified
2024-11-21T14:10:24.646054Z
Summary
Heap-use-after-free in .tmpgt0oOx
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49167

Crash type: Heap-use-after-free READ 8
Crash state:
.tmpgt0oOx
.tmpgt0oOx
wasmtime_setjmp
References

Affected packages

OSS-Fuzz / wasmtime

Package

Name
wasmtime
Purl
pkg:generic/wasmtime

Affected ranges

Type
GIT
Repo
https://github.com/bytecodealliance/wasmtime
Events

Affected versions

Other

dev
minimum-viable-wasi-proxy-serve

v0.*

v0.40.0
v0.40.1

v1.*

v1.0.0
v1.0.1
v1.0.2

v10.*

v10.0.0
v10.0.1
v10.0.2

v11.*

v11.0.0
v11.0.1
v11.0.2

v12.*

v12.0.0
v12.0.1
v12.0.2

v13.*

v13.0.0
v13.0.1

v14.*

v14.0.0
v14.0.1
v14.0.2
v14.0.3
v14.0.4

v15.*

v15.0.0
v15.0.1

v16.*

v16.0.0

v17.*

v17.0.0
v17.0.1
v17.0.2
v17.0.3

v18.*

v18.0.0
v18.0.1
v18.0.2
v18.0.3
v18.0.4

v19.*

v19.0.0
v19.0.1
v19.0.2

v2.*

v2.0.0
v2.0.1
v2.0.2

v20.*

v20.0.0
v20.0.1
v20.0.2

v21.*

v21.0.0
v21.0.1
v21.0.2

v22.*

v22.0.0
v22.0.1

v23.*

v23.0.0
v23.0.1
v23.0.2
v23.0.3

v24.*

v24.0.0
v24.0.1
v24.0.2

v25.*

v25.0.0
v25.0.1
v25.0.2
v25.0.3

v26.*

v26.0.0
v26.0.1

v27.*

v27.0.0

v3.*

v3.0.0
v3.0.1

v4.*

v4.0.0
v4.0.1

v5.*

v5.0.0
v5.0.1

v6.*

v6.0.0
v6.0.1
v6.0.2

v7.*

v7.0.0
v7.0.1

v8.*

v8.0.0
v8.0.1

v9.*

v9.0.0
v9.0.1
v9.0.2
v9.0.3
v9.0.4

Ecosystem specific

{
    "severity": "HIGH"
}