Threats tagged 'ghsa-368p-492j-h227'

Wasmtime versions 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contain a denial of service vulnerability. This flaw allows guest code to cause a host panic by performing out-of-bounds zero-length stream operations. Specifically, malicious guests can trigger panics in WASIp3 embedders via unvalidated zero-length component model stream reads or writes.