PT-2022-24953 · Wasmtime · Wasmtime

Alexcrichton · Published 2022-11-07 · Updated 2024-02-01 · CVE-2022-39394

Positive Technologies (AI Summary)

CVSS v3.1

3.8

Low

Base vector

AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Wasmtime versions prior to 2.0.2

Description There is a bug in Wasmtime's C API implementation where the definition of the wasmtime trap code does not match its declared signature in the wasmtime/trap.h header file. This discrepancy causes the function implementation to perform a 4-byte write into a 1-byte buffer provided by the caller, leading to three zero bytes being written beyond the 1-byte location provided by the caller. This issue affects users of the C API function wasmtime trap code, but not users of the wasmtime crate.

Recommendations For versions prior to 2.0.2, upgrade to Wasmtime 2.0.2 to resolve the issue. As a temporary workaround, consider providing a 4-byte buffer casted to a 1-byte buffer when calling wasmtime trap code.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2022-39394

GHSA-H84Q-M8RR-3V9Q

RUSTSEC-2022-0097

Affected Products

Wasmtime

References · 16

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/39xxx/CVE-2022-39394.json · Exploit
• https://github.com/bytecodealliance/wasmtime/commit/087d9d7becf7422b3f872a3bcd5d97bb7ce7ff36 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-39394 · Security Note
• https://osv.dev/vulnerability/GHSA-h84q-m8rr-3v9q · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-39394 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-39394 · Vendor Advisory
• https://osv.dev/vulnerability/RUSTSEC-2022-0097 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-39394 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-39394 · Vendor Advisory
• https://github.com/bytecodealliance/wasmtime · Note
• https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-h84q-m8rr-3v9q · Note
• https://github.com/bytecodealliance/wasmtime/commit/5b6d5e78de106503b3b9add218bb3d2b1d63c493 · Note
• https://t.me/cvenotify/37871 · Telegram Post
• https://crates.io/crates/wasmtime · Note
• https://groups.google.com/a/bytecodealliance.org/g/sec-announce/c/c1HBDDJwNPA · Note