漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
Wasmtime vulnerable to segfault when using component resources
Vulnerability Description
Wasmtime is a runtime for WebAssembly. In versions from 38.0.0 to before 38.0.3, the implementation of component-model related host-to-wasm trampolines in Wasmtime contained a bug where it's possible to carefully craft a component, which when called in a specific way, would crash the host with a segfault or assert failure. Wasmtime 38.0.3 has been released and is patched to fix this issue. There are no workarounds.
CVSS Information
N/A
Vulnerability Type
对异常条件的处理不恰当
Vulnerability Title
wasmtime 安全漏洞
Vulnerability Description
wasmtime是Bytecode Alliance开源的一个轻量级WebAssembly运行时。 Wasmtime 38.0.0版本至38.0.3之前版本存在安全漏洞,该漏洞源于组件模型相关的主机到wasm跳板实现存在缺陷,可能导致段错误或断言失败。
CVSS Information
N/A
Vulnerability Type
N/A