Product by Bytecodealliance
Cranelift-codegen
6 known vulnerabilities in Cranelift-codegen (Bytecodealliance), 0 of them actively exploited (CISA KEV).
Key figures
6
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2023-26489 | Guest-controlled out-of-bounds read/write on x86_64 in wasmtime | 10.0 | |
| Medium | CVE-2022-31104 | Miscompilation of `i8x16.swizzle` and `select` with v128 inputs in Wasmtime | 4.8 | |
| High | CVE-2022-31146 | Use After Free in Wasmtime | 6.4 | |
| High | CVE-2022-31169 | Cranelift vulnerable to miscompilation of constant values in division on AArch64 | 5.9 | |
| High | CVE-2021-32629 | Memory access due to code generation flaw in Cranelift module | 7.2 | |
| Medium | CVE-2023-27477 | Bytecode Alliance wasmtime: Off-by-one Error | 3.1 |