{"id":"CVE-2024-30266","sourceIdentifier":"security-advisories@github.com","published":"2024-04-04T16:15:09.107","lastModified":"2026-06-17T07:26:38.300","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"wasmtime is a runtime for WebAssembly. The 19.0.0 release of Wasmtime contains a regression introduced during its development which can lead to a guest WebAssembly module causing a panic in the host runtime. A valid WebAssembly module, when executed at runtime, may cause this panic. This vulnerability has been patched in version 19.0.1."},{"lang":"es","value":"wasmtime es un tiempo de ejecución para WebAssembly. La versión 19.0.0 de Wasmtime contiene una regresión introducida durante su desarrollo que puede provocar que un módulo WebAssembly invitado cause pánico en el tiempo de ejecución del host. Un módulo WebAssembly válido, cuando se ejecuta en tiempo de ejecución, puede provocar este pánico. Esta vulnerabilidad ha sido parcheada en la versión 19.0.1."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"bytecodealliance","product":"wasmtime","versions":[{"version":"= 19.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","baseScore":3.3,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":1.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-04-04T19:54:05.029928Z","id":"CVE-2024-30266","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-843"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bytecodealliance:wasmtime:19.0.0:*:*:*:*:rust:*:*","matchCriteriaId":"9C2CCC83-D074-46EA-9164-0B7C1B12FDCA"}]}]}],"references":[{"url":"https://github.com/bytecodealliance/wasmtime/commit/7f57d0bb0948fa56cc950278d0db230ed10e8664","source":"security-advisories@github.com","tags":["Patch"]},{"url":"https://github.com/bytecodealliance/wasmtime/issues/8281","source":"security-advisories@github.com","tags":["Exploit","Issue Tracking"]},{"url":"https://github.com/bytecodealliance/wasmtime/pull/8018","source":"security-advisories@github.com","tags":["Patch"]},{"url":"https://github.com/bytecodealliance/wasmtime/pull/8283","source":"security-advisories@github.com","tags":["Patch"]},{"url":"https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-75hq-h6g9-h4q5","source":"security-advisories@github.com","tags":["Mitigation","Third Party Advisory"]},{"url":"https://github.com/bytecodealliance/wasmtime/commit/7f57d0bb0948fa56cc950278d0db230ed10e8664","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/bytecodealliance/wasmtime/issues/8281","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking"]},{"url":"https://github.com/bytecodealliance/wasmtime/pull/8018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/bytecodealliance/wasmtime/pull/8283","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-75hq-h6g9-h4q5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Third Party Advisory"]}]}