Threats tagged 'ghsa-hv43-9665-59p4'

Wasmtime versions from 49.0.0 up to but not including 49.0.3 contain a denial-of-service vulnerability. This flaw allows a WebAssembly guest to cause a host panic by transcoding overlapping strings in fused adapters, specifically when a component-to-component call transfers a string whose source and destination alias each other. Instead of raising a trap, the host crashes, resulting in denial of service.