CVE-2022-31104

Advisory

Wasmtime 15.0.1 (Python bindings) downloads a precompiled version of Wasmtime core (15.0.1) that includes a security fix for the CVE-2022-31104.
https://github.com/bytecodealliance/wasmtime/pull/4317
https://github.com/bytecodealliance/wasmtime/commit/8bb07523e22df1ab3cbd265c77e836bf84186eb7

Affected package

Affected versions

Fixed versions

Vulnerability changelog

This vulnerability has no description

Resources

• https://docs.rs/wasmtime/latest/wasmtime/struct.Config.html#method.wasm_simd
• https://github.com/webassembly/simd
• https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-jqwc-c49r-4w2x
• https://github.com/bytecodealliance/wasmtime/pull/4318
• https://github.com/bytecodealliance/wasmtime/pull/4317
• https://webassembly.github.io/spec/
• https://nvd.nist.gov/vuln/detail/CVE-2022-31104
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31104