CVE-2022-31104

MEDIUM4.8EPSS 2.1%

Miscompilation of `i8x16.swizzle` and `select` with v128 inputs

Published: 6/29/2022Modified: 5/2/2025

Also known as:GHSA-jqwc-c49r-4w2xRUSTSEC-2022-0095

Description

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-jqwc-c49r-4w2x. For more information see the GitHub-hosted security advisory.

Affected packages (3)

crates.io/cranelift-codegenfrom 0, < 0.85.1
crates.io/wasmtimefrom 0, < 0.38.1
crates.io/wasmtime>= 0.0.0-0, < 0.38.1

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	MEDIUM4.8	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L

References (10)

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2022-31104
PATCHhttps://crates.io/crates/wasmtime
PATCHhttps://github.com/bytecodealliance/wasmtime
WEBhttps://docs.rs/wasmtime/latest/wasmtime/struct.Config.html#method.wasm_simd
WEBhttps://github.com/bytecodealliance/wasmtime/pull/4317
WEBhttps://github.com/bytecodealliance/wasmtime/pull/4318
WEBhttps://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-jqwc-c49r-4w2x
WEBhttps://github.com/webassembly/simd
WEBhttps://rustsec.org/advisories/RUSTSEC-2022-0095.html
WEBhttps://webassembly.github.io/spec