wasm3 (crates.io) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the crates.io package wasm3, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (3)

• CVE-2024-27529 — CVSS 8.4 (high): wasm3 139076a contains memory leaks in Read_utf8.
• CVE-2022-39974 — CVSS 7.5 (high): WASM3 v0.5.0 was discovered to contain a segmentation fault via the component op_Select_i32_srs in wasm3/source/m3_exec.h.
• CVE-2022-34529 — CVSS 5.5 (medium): WASM3 v0.5.0 was discovered to contain a segmentation fault via the component Compile_Memory_CopyFill.