4.3

CVE-2023-27477: bytecodealliance cranelift-codegen Off-by-one Error

CVSS: 4.3v3.1MediumModified
AliasesCGA-9m64-cvhg-g2rmCGA-mqfg-2p3p-f993GHSA-xm67-587q-r2vw
Published 08-03-2023Last modified 25-02-2025
Open JSON

Vulnerability summary

CVE-2023-27477 is a medium (CVSS 4.3) Off-by-one Error vulnerability in bytecodealliance cranelift-codegen. EPSS estimates a 0.62% chance of exploitation in the next 30 days, higher than 48.9% of scored vulnerabilities.

Overall risk
17/100
0100
Low · default modelHow is this calculated?
CVSS score
4.3/10
010
Medium · v3.1 (NVD)
EPSS score
0.62%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 0 · Related 2
CGA-5JCR-R8PM-HJVGCGA-R89W-G3FX-79JW

Timeline

  1. 08-03-2023
    PublishedVulnerability first disclosed.
  2. 25-02-2025
    Last modifiedVulnerability information updated.

Description

wasmtime is a fast and secure runtime for WebAssembly. Wasmtime's code generation backend, Cranelift, has a bug on x86_64 platforms for the WebAssembly `i8x16.select` instruction which will produce the wrong results when the same operand is provided to the instruction and some of the selected indices are greater than 16. There is an off-by-one error in the calculation of the mask to the `pshufb` instruction which causes incorrect results to be returned if lanes are selected from the second vector. This codegen bug has been fixed in Wasmtiem 6.0.1, 5.0.1, and 4.0.1. Users are recommended to upgrade to these updated versions. If upgrading is not an option for you at this time, you can avoid this miscompilation by disabling the Wasm simd proposal. Additionally the bug is only present on x86_64 hosts. Other platforms such as AArch64 and s390x are not affected.

CVSS metrics

5 scores · 5 sources · 1 version

EPSS trend

Probability

0.62%

Chance of exploitation in the next 30 days

Percentile

49%

Versus all other CVEs

30-day change

0.00 pp

From 0.62% on 20-09-2026

20-09-202620-10-2026
EPSS score
0.62%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Bytecodealliance2 products
  • cranelift-codegen≥ 0.84.0, < 0.91.1 | 0.92.0 | 0.93.0
  • wasmtimecranelift-codegen: >= 0.88.0, < 0.91.1 | cranelift-codegen: >= 0.92.0, < 0.92.1 | cranelift-codegen: >= 0.93.0, < 0.93.1 | wasmtime: >= 0.37.0, < 4.0.1 | wasmtime: >= 5.0.0, < 5.0.1 | wasmtime: >= 6.0.0, < 6.0.1 | ≥ 0.37.0, < 4.0.1 | 5.0.0 | 6.0.0
Crates.Io2 products
  • cranelift-codegen≥ 0.88.0, < 0.91.1 | ≥ 0.92.0, < 0.92.1 | ≥ 0.93.0, < 0.93.1
  • wasmtime≥ 1.0.0, < 4.0.1 | ≥ 5.0.0, < 5.0.1 | ≥ 6.0.0, < 6.0.1
Chainguard1 product
  • wasmtime< 6.0.1-r0
Wolfi1 product
  • wasmtime< 6.0.1-r0

4 vendors · 6 products

References

10 links