CVE-2024-30266

wasmtime is a runtime for WebAssembly. The 19.0.0 release of Wasmtime contains a regression introduced during its development which can lead to a guest WebAssembly module causing a panic in the host runtime. A valid WebAssembly module, when executed at runtime, may cause this panic. This vulnerability has been patched in version 19.0.1.

• CWE-843

• https://github.com/bytecodealliance/wasmtime/commit/7f57d0bb0948fa56cc950278d0db230ed10e8664Patch
• https://github.com/bytecodealliance/wasmtime/issues/8281Exploit, Issue Tracking
• https://github.com/bytecodealliance/wasmtime/pull/8018Patch
• https://github.com/bytecodealliance/wasmtime/pull/8283Patch
• https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-75hq-h6g9-h4q5Mitigation, Third Party Advisory
• https://github.com/bytecodealliance/wasmtime/commit/7f57d0bb0948fa56cc950278d0db230ed10e8664Patch
• https://github.com/bytecodealliance/wasmtime/issues/8281Exploit, Issue Tracking
• https://github.com/bytecodealliance/wasmtime/pull/8018Patch
• https://github.com/bytecodealliance/wasmtime/pull/8283Patch
• https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-75hq-h6g9-h4q5Mitigation, Third Party Advisory

Published

Apr 4, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-30260Undici is an HTTP/1.1 client, written from scratch for Node.…4.3
• CVE-2024-30261Undici is an HTTP/1.1 client, written from scratch for Node.…3.5
• CVE-2024-30262Contao is an open source content management system. Prior to…7.1
• CVE-2024-30263macro-pdfviewer is a PDF Viewer Macro for XWiki using Mozill…7.7
• CVE-2024-30264Typebot is an open-source chatbot builder. A reflected cross…9.3
• CVE-2024-30265Collabora Online is a collaborative online office suite base…7.5
• CVE-2024-30268Cacti provides an operational monitoring and fault managemen…6.1
• CVE-2024-30269DataEase, an open source data visualization and analysis too…5.3
• CVE-2024-3027The Smart Slider 3 plugin for WordPress is vulnerable to una…6.4
• CVE-2024-30270mailcow: dockerized is an open source groupware/email suite …6.2
• CVE-2024-30271Illustrator versions 28.3, 27.9.2 and earlier are affected b…7.8
• CVE-2024-30272Illustrator versions 28.3, 27.9.2 and earlier are affected b…7.8