{"id":"RUSTSEC-2022-0099","revision":"63475643a9604bfc8d4f609f5055af10","records":[{"revision":"63475643a9604bfc8d4f609f5055af10","observedAt":"2026-10-24T13:19:54.901+00:00","statement":{"source":"osv","id":"RUSTSEC-2022-0099","aliases":["CVE-2022-24791","GHSA-gwc9-348x-qwv2","RUSTSEC-2022-0016"],"title":" Use after free with `externref`s and epoch interruption in Wasmtime","description":"This is an entry in the RustSec database for the Wasmtime security advisory\nlocated at\nhttps://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-gwc9-348x-qwv2.\nFor more information see the GitHub-hosted security advisory.","state":0,"publishedAt":"2022-03-28T12:00:00+00:00","modifiedAt":"2026-10-12T18:00:03.4123196+00:00","affected":[{"ecosystem":"crates.io","name":"wasmtime","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0.0.0-0"},{"kind":"fixed","version":"0.34.2"},{"kind":"introduced","version":"0.35.0"},{"kind":"fixed","version":"0.35.2"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://crates.io/crates/wasmtime","https://rustsec.org/advisories/RUSTSEC-2022-0099.html","https://github.com/bytecodealliance/wasmtime/commit/666c2554ea0e1728c35aa41178cf235920db888a"],"sourceUrl":"https://osv.dev/vulnerability/RUSTSEC-2022-0099","license":"OSV · upstream source license applies","key":"osv:RUSTSEC-2022-0099","identifiers":["RUSTSEC-2022-0099","CVE-2022-24791","GHSA-gwc9-348x-qwv2","RUSTSEC-2022-0016"]},"retained":false,"historicalAffected":[]}],"coverage":[]}