Reported

November 7, 2022

Issued

May 2, 2025

Package

wasmtime (crates.io)

Type

Vulnerability

Aliases

• CVE-2022-39394
• GHSA-h84q-m8rr-3v9q

References

• https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-h84q-m8rr-3v9q

CVSS Score

3.8 LOW

CVSS Details

Attack Vector

Local

Attack Complexity

High

Privileges Required

High

User Interaction

Required

Scope

Unchanged

Confidentiality Impact

Low

Integrity Impact

Low

Availability Impact

Low

CVSS Vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L

Patched

• >=1.0.2, <2.0.0
• >=2.0.2

Description

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-h84q-m8rr-3v9q. For more information see the GitHub-hosted security advisory.

Advisory available under CC0-1.0 license.