{"id":"CVE-2022-39394","aliases":["RUSTSEC-2022-0097","GHSA-h84q-m8rr-3v9q"],"title":"Out of bounds write in `wasmtime_trap_code` C API function","summary":"Out of bounds write in `wasmtime_trap_code` C API function","severity":"low","cvss":3.8,"cvssVector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L","vendor":"wasmtime","product":"wasmtime","ecosystem":"rust","affected":["wasmtime >= 2.0.0, < 2.0.2"],"patched":["wasmtime 2.0.2"],"published":"2022-11-07","updated":"2026-10-12","sourceUpdated":"2026-10-12T18:00:06.112472830Z","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/RUSTSEC-2022-0097","references":[{"url":"https://crates.io/crates/wasmtime"},{"url":"https://rustsec.org/advisories/RUSTSEC-2022-0097.html"},{"url":"https://github.com/bytecodealliance/wasmtime/commit/087d9d7becf7422b3f872a3bcd5d97bb7ce7ff36"}],"tags":["osv","rust"],"epss":0.00354,"epssPercentile":0.28952,"ingestedAt":"2026-10-13T11:45:30.160Z","slug":"CVE-2022-39394","body":"## Overview\n\nThis is an entry in the RustSec database for the Wasmtime security advisory\nlocated at\nhttps://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-h84q-m8rr-3v9q.\nFor more information see the GitHub-hosted security advisory.\n\n## Affected packages\n\n- `wasmtime >= 2.0.0, < 2.0.2`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `wasmtime 2.0.2`","depth":"sunlit","depthScore":21,"depthScoreParts":{"impact":20.9,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}