CVE-2022-23636None▾ TwilightPoC availableMiscompilation of constant values in division on AArch64
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 2.8 · likelihood 0.2 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 1 source. Availability, not in-the-wild use.
Exploit-prediction probability, daily snapshots since Oct 13.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via OSV
Last analysed / modified upstream
0.8%
1 GitHub repo (last check)
This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-7f6x-jwh5-m9r4. For more information see the GitHub-hosted security advisory.
wasmtime >= 0.0.0-0, < 0.38.2Upgrade to a patched release:
wasmtime 0.38.2Connected by shared product, vendor, weakness, or advisory.
CVE-2022-31146NoneUse After Free with `externref`s in Wasmtime
CVE-2026-115893Critical· 9.9Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction
CVE-2026-115892Medium· 5.7Panic lowering a host-created component model stream into a guest that expects a different payload type
CVE-2026-115889Critical· 9.9Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilation
CVE-2026-115392High· 7.9Filesystem sandbox escape when paths or symlinks contain trailing slashes
CVE-2026-115393Low· 3.8Stores can mix up type indices between engines