{"id":"EUVD-2024-1137","enisaUuid":"3387d2fb-0897-3635-974d-061d36149259","description":"wasmtime is a runtime for WebAssembly. The 19.0.0 release of Wasmtime contains a regression introduced during its development which can lead to a guest WebAssembly module causing a panic in the host runtime. A valid WebAssembly module, when executed at runtime, may cause this panic. This vulnerability has been patched in version 19.0.1.","datePublished":"Apr 4, 2024, 3:42:00 PM","dateUpdated":"Aug 2, 2024, 1:32:07 AM","baseScore":3.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","references":"https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-75hq-h6g9-h4q5\nhttps://github.com/bytecodealliance/wasmtime/issues/8281\nhttps://github.com/bytecodealliance/wasmtime/pull/8018\nhttps://github.com/bytecodealliance/wasmtime/pull/8283\nhttps://github.com/bytecodealliance/wasmtime/commit/7f57d0bb0948fa56cc950278d0db230ed10e8664\n","aliases":"CVE-2024-30266\nGHSA-75hq-h6g9-h4q5\n","assigner":"GitHub_M","epss":0.32,"enisaIdProduct":[{"id":"192708ae-d947-3ad1-ae8c-f5d1cad860f3","product":{"name":"wasmtime","vendor":{"name":"bytecodealliance"}}},{"id":"d0979b1b-2f6d-37bc-9729-5e7d155776ed","product":{"name":"wasmtime","vendor":{"name":"bytecodealliance"}},"product_version":"\u003d 19.0.0"}],"enisaIdVendor":[{"id":"5d7c8298-00f1-3569-a3dd-b4ffe574e2d3","vendor":{"name":"bytecodealliance"}}],"enisaIdVulnerability":[{"id":"4737cb70-da9e-3664-8c5d-94fc51772c1b","vulnerability":{"id":"GHSA-75hq-h6g9-h4q5","description":"Wasmtime vulnerable to panic when using a dropped extenref-typed element segment","datePublished":"Apr 2, 2024, 9:09:23 PM","dateUpdated":"May 2, 2025, 12:54:52 PM","baseScore":0.0,"references":"https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-75hq-h6g9-h4q5\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-30266\nhttps://github.com/bytecodealliance/wasmtime/issues/8281\nhttps://github.com/bytecodealliance/wasmtime/pull/8018\nhttps://github.com/bytecodealliance/wasmtime/pull/8283\nhttps://github.com/bytecodealliance/wasmtime/commit/7f57d0bb0948fa56cc950278d0db230ed10e8664\nhttps://github.com/bytecodealliance/wasmtime\nhttps://rustsec.org/advisories/RUSTSEC-2024-0441.html\n","enisa_id":"EUVD-2024-1137\n","aliases":"GHSA-75hq-h6g9-h4q5\nCVE-2024-30266\n","epss":0.0,"dataProcessed":"May 3, 2026, 2:08:40 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"a4d6982a-d2c6-3f81-95c5-8b2aec3c68f5","vulnerability":{"id":"PYSEC-2024-327","description":"wasmtime is a runtime for WebAssembly. The 19.0.0 release of Wasmtime contains a regression introduced during its development which can lead to a guest WebAssembly module causing a panic in the host runtime. A valid WebAssembly module, when executed at runtime, may cause this panic. This vulnerability has been patched in version 19.0.1.","datePublished":"Apr 4, 2024, 4:15:09 PM","dateUpdated":"Jul 13, 2026, 5:52:32 AM","baseScore":0.0,"references":"https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-75hq-h6g9-h4q5\nhttps://github.com/bytecodealliance/wasmtime/issues/8281\nhttps://github.com/bytecodealliance/wasmtime/commit/7f57d0bb0948fa56cc950278d0db230ed10e8664\nhttps://github.com/bytecodealliance/wasmtime/pull/8018\nhttps://github.com/bytecodealliance/wasmtime/pull/8283\n","enisa_id":"EUVD-2024-1137\n","aliases":"CVE-2024-30266\nGHSA-75hq-h6g9-h4q5\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 2:12:41 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"ba0f2dd9-e6b6-36ad-89da-ec92bbb9b9fe","vulnerability":{"id":"CVE-2024-30266","description":"wasmtime is a runtime for WebAssembly. The 19.0.0 release of Wasmtime contains a regression introduced during its development which can lead to a guest WebAssembly module causing a panic in the host runtime. A valid WebAssembly module, when executed at runtime, may cause this panic. This vulnerability has been patched in version 19.0.1.","datePublished":"Apr 4, 2024, 3:42:00 PM","dateUpdated":"Aug 2, 2024, 1:32:07 AM","status":"PUBLISHED","baseScore":3.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","references":"https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-75hq-h6g9-h4q5\nhttps://github.com/bytecodealliance/wasmtime/issues/8281\nhttps://github.com/bytecodealliance/wasmtime/pull/8018\nhttps://github.com/bytecodealliance/wasmtime/pull/8283\nhttps://github.com/bytecodealliance/wasmtime/commit/7f57d0bb0948fa56cc950278d0db230ed10e8664\n","enisa_id":"EUVD-2024-1137\n","assigner":"GitHub_M","epss":0.32,"dataProcessed":"Oct 29, 2026, 7:19:23 AM","vulnerabilityProduct":[{"id":"9c9c69b1-e61f-4400-bd2c-b0a189dfff0c","product":{"name":"wasmtime","vendor":{"name":"bytecodealliance"}},"product_version":"\u003d 19.0.0"},{"id":"e63e42c5-85e4-309b-8571-01d839aa8045","product":{"name":"wasmtime","vendor":{"name":"bytecodealliance"}},"product_version":"\u003d 19.0.0"}],"vulnerabilityVendor":[{"id":"2009fe30-a18f-3d30-808d-2fd96a5feaf4","vendor":{"name":"bytecodealliance"}}]}}],"enisaIdAdvisory":[]}