Количество 4
Количество 4
CVE-2022-31104
Wasmtime is a standalone runtime for WebAssembly. In affected versions wasmtime's implementation of the SIMD proposal for WebAssembly on x86_64 contained two distinct bugs in the instruction lowerings implemented in Cranelift. The aarch64 implementation of the simd proposal is not affected. The bugs were presented in the `i8x16.swizzle` and `select` WebAssembly instructions. The `select` instruction is only affected when the inputs are of `v128` type. The correspondingly affected Cranelift instructions were `swizzle` and `select`. The `swizzle` instruction lowering in Cranelift erroneously overwrote the mask input register which could corrupt a constant value, for example. This means that future uses of the same constant may see a different value than the constant itself. The `select` instruction lowering in Cranelift wasn't correctly implemented for vector types that are 128-bits wide. When the condition was 0 the wrong instruction was used to move the correct input to the output of t
CVE-2022-31104
Miscompilation of `i8x16.swizzle` and `select` with v128 inputs in Wasmtime
CVE-2022-31104
Wasmtime is a standalone runtime for WebAssembly. In affected versions ...
GHSA-jqwc-c49r-4w2x
Miscompilation of `i8x16.swizzle` and `select` with v128 inputs
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2022-31104 Wasmtime is a standalone runtime for WebAssembly. In affected versions wasmtime's implementation of the SIMD proposal for WebAssembly on x86_64 contained two distinct bugs in the instruction lowerings implemented in Cranelift. The aarch64 implementation of the simd proposal is not affected. The bugs were presented in the `i8x16.swizzle` and `select` WebAssembly instructions. The `select` instruction is only affected when the inputs are of `v128` type. The correspondingly affected Cranelift instructions were `swizzle` and `select`. The `swizzle` instruction lowering in Cranelift erroneously overwrote the mask input register which could corrupt a constant value, for example. This means that future uses of the same constant may see a different value than the constant itself. The `select` instruction lowering in Cranelift wasn't correctly implemented for vector types that are 128-bits wide. When the condition was 0 the wrong instruction was used to move the correct input to the output of t | CVSS3: 4.8 | 1% Низкий | больше 3 лет назад | |
CVE-2022-31104 Miscompilation of `i8x16.swizzle` and `select` with v128 inputs in Wasmtime | 1% Низкий | 5 месяцев назад | ||
CVE-2022-31104 Wasmtime is a standalone runtime for WebAssembly. In affected versions ... | CVSS3: 4.8 | 1% Низкий | больше 3 лет назад | |
GHSA-jqwc-c49r-4w2x Miscompilation of `i8x16.swizzle` and `select` with v128 inputs | CVSS3: 4.8 | 1% Низкий | больше 3 лет назад |
Уязвимостей на страницу