---
id: CVE-2024-47813
aliases:
  - RUSTSEC-2024-0439
  - GHSA-7qmx-3fpx-r45m
  - PYSEC-2024-311
title: >-
  Race condition could lead to WebAssembly control-flow integrity and type
  safety violations
summary: >-
  Race condition could lead to WebAssembly control-flow integrity and type
  safety violations
severity: low
cvss: 2.9
cvssVector: 'CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:L'
vendor: wasmtime
product: wasmtime
ecosystem: rust
affected:
  - 'wasmtime >= 25.0.0, < 25.0.2'
patched:
  - wasmtime 25.0.2
published: '2024-10-03'
updated: '2026-10-12'
sourceUpdated: '2026-10-12T18:00:07.405869415Z'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/RUSTSEC-2024-0439'
references:
  - url: 'https://crates.io/crates/wasmtime'
  - url: 'https://rustsec.org/advisories/RUSTSEC-2024-0439.html'
  - url: 'https://github.com/bytecodealliance/wasmtime/pull/7969'
tags:
  - osv
  - rust
epss: 0.00153
epssPercentile: 0.0438
ingestedAt: '2026-10-13T11:45:30.173Z'
---

## Overview

This is an entry in the RustSec database for the Wasmtime security advisory
located at
https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-7qmx-3fpx-r45m.
For more information see the GitHub-hosted security advisory.

## Affected packages

- `wasmtime >= 25.0.0, < 25.0.2`

## Remediation

Upgrade to a patched release:

- `wasmtime 25.0.2`