Approved changes feed: RSS · Atom
cpe:2.3:a:wasmi-labs:wasmi:*:*:*:*:*:rust:*:*part: a version: * update: *
| Vendor | Wasmi Labs (4299f91c-8e92-5425-808a-a7834ac48883) |
|---|---|
| Product | Wasmi (0458be2a-b539-5dbc-a75d-8aa2d14a66eb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | rust |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:cargo/wasmi |
purl2cpe | 2026-06-01 10:16:58.034508 |
pkg:github/wasmi-labs/wasmi |
purl2cpe | 2026-06-01 10:16:58.034510 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-66627 |
vulnerable | 2026-06-08 07:41:19.365565 |
Wasmi's Linear Memory has a Critical Use After Free Vulnerability
HIGH (8.4)
Wasmi is a WebAssembly interpreter focused on constrained and embedded systems. In versions 0.41.0, 0.41.1, 0.42.0 through 0.47.1, 0.50.0 through 0.51.2 and 1.0.0, Wasmi's linear memory implementation leads to a Use After Free vulnerability, triggered by a WebAssembly module under certain memory growth conditions. This issue potentially leads to memory corruption, information disclosure, or code execution. This issue is fixed in versions 0.41.2, 0.47.1, 0.51.3 and 1.0.1. To workaround this issue, consider limiting the maximum linear memory sizes where feasible.
Published: 2025-12-09T02:52:46.938Z
Updated: 2025-12-09T15:21:18.048Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28123 |
vulnerable | 2026-06-08 06:33:26.525399 |
Wasmi Out-of-bounds Write for host to Wasm calls with more than 128 Parameters
HIGH (7.3)
Wasmi is an efficient and lightweight WebAssembly interpreter with a focus on constrained and embedded systems. In the WASMI Interpreter, an Out-of-bounds Buffer Write will arise if the host calls or resumes a Wasm function with more parameters than the default limit (128), as it will surpass the stack value. This doesn’t affect calls from Wasm to Wasm, only from host to Wasm. This vulnerability was patched in version 0.31.1.
Published: 2024-03-08T21:29:53.555Z
Updated: 2024-08-05T18:14:48.975Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.