Логотип exploitDog
bind:CVE-2022-31104
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2022-31104

Количество 4

Количество 4

nvd логотип

CVE-2022-31104

больше 3 лет назад

Wasmtime is a standalone runtime for WebAssembly. In affected versions wasmtime's implementation of the SIMD proposal for WebAssembly on x86_64 contained two distinct bugs in the instruction lowerings implemented in Cranelift. The aarch64 implementation of the simd proposal is not affected. The bugs were presented in the `i8x16.swizzle` and `select` WebAssembly instructions. The `select` instruction is only affected when the inputs are of `v128` type. The correspondingly affected Cranelift instructions were `swizzle` and `select`. The `swizzle` instruction lowering in Cranelift erroneously overwrote the mask input register which could corrupt a constant value, for example. This means that future uses of the same constant may see a different value than the constant itself. The `select` instruction lowering in Cranelift wasn't correctly implemented for vector types that are 128-bits wide. When the condition was 0 the wrong instruction was used to move the correct input to the output of t

CVSS3: 4.8
EPSS: Низкий
msrc логотип

CVE-2022-31104

5 месяцев назад

Miscompilation of `i8x16.swizzle` and `select` with v128 inputs in Wasmtime

EPSS: Низкий
debian логотип

CVE-2022-31104

больше 3 лет назад

Wasmtime is a standalone runtime for WebAssembly. In affected versions ...

CVSS3: 4.8
EPSS: Низкий
github логотип

GHSA-jqwc-c49r-4w2x

больше 3 лет назад

Miscompilation of `i8x16.swizzle` and `select` with v128 inputs

CVSS3: 4.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2022-31104

Wasmtime is a standalone runtime for WebAssembly. In affected versions wasmtime's implementation of the SIMD proposal for WebAssembly on x86_64 contained two distinct bugs in the instruction lowerings implemented in Cranelift. The aarch64 implementation of the simd proposal is not affected. The bugs were presented in the `i8x16.swizzle` and `select` WebAssembly instructions. The `select` instruction is only affected when the inputs are of `v128` type. The correspondingly affected Cranelift instructions were `swizzle` and `select`. The `swizzle` instruction lowering in Cranelift erroneously overwrote the mask input register which could corrupt a constant value, for example. This means that future uses of the same constant may see a different value than the constant itself. The `select` instruction lowering in Cranelift wasn't correctly implemented for vector types that are 128-bits wide. When the condition was 0 the wrong instruction was used to move the correct input to the output of t

CVSS3: 4.8
1%
Низкий
больше 3 лет назад
msrc логотип
CVE-2022-31104

Miscompilation of `i8x16.swizzle` and `select` with v128 inputs in Wasmtime

1%
Низкий
5 месяцев назад
debian логотип
CVE-2022-31104

Wasmtime is a standalone runtime for WebAssembly. In affected versions ...

CVSS3: 4.8
1%
Низкий
больше 3 лет назад
github логотип
GHSA-jqwc-c49r-4w2x

Miscompilation of `i8x16.swizzle` and `select` with v128 inputs

CVSS3: 4.8
1%
Низкий
больше 3 лет назад

Уязвимостей на страницу